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Ap paratus and ^thod for th e pr o tect ed transmission and 
^ presentation ~* electronical 1 y published documents 

The present invention concerns an apparatus for protecting 
5 electronically published docu.ents as set forth in the classifying 
portion of claim 1 and a method as set forth in the classifying 

portion of claim 9. 

For defining the terms used in the present application, the 

following shall apply: 
10 Data are representations of information of any sort. The 

classification of data occurs in data types. Information can only be 
useful on a computer when it has been assigned to a data type in 
accordance with fundamental conventions and physically stored, 
information can be transformed into an equivalent data type or a 
15 physically stored form without a loss of content. 

A text is constituted of the smallest units of texts, characters 
or symbols, such as, e.g., a number or a Chinese character. Each of 
these characters possesses a digital representation, in accordance 
with a pre-given convention or an agreed-on standard. A character is 
represented by a sequence of e.g. 8- or 16-bit chains of zeros and 

ones. There must be a set of characters, thus a precise association of 
text characters with their binary representation, and a font, by means 
of which the individual elements- of this character set forms a surface 
of pixels. The bit sequence can be understood as an electronic text 
before or after the replacement by the character set. Agreement with 
the original text is also given when a computer program first 
transforms passive data into an output, so that it can be represented 
on an output apparatus. In addition, a text can also be represented on 
the output unit by active data that contains executable commands, 
30 operating instructions or instructional data. These active data can 
contain direct or indirect processor instructions. 

The text is represented in and on the output unit, in and on a 
surface. The text consists of a content, thus a textually fixed verbal 
utterance, and a layout. In this layout there is a representation of 
35 font and type size, the positioning of individual words, characters, 
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symbols or pictures, the type of chapter or page numbering, the kind 
of line or a length thereof, the line separation, page size, margin 
width, color or all other attributes which an observer can optically 
distinguish in represented characters. 

The text can also contain dialogue boxes or input fields which 
request the user to enter data. 

A picture means a representation of something or someone on a 
surface. Electronic or digitalized pictures are thereby stored in a 
data format in which they can be transformed as active or passive data 
by a computer program into a static, flat representation on an output 
unit. Defined in this way, texts can also be stored as pictures. 
Conversely, pictures can also be viewed as texts. A picture can be a 
representation of a real object. But it can also be a drawing 
generated by a person or computer of a real or non-real object. A 
picture can be based on pixels, bitmaps vectors or fractals. Some data 
formats employ compression methods. New methods of coding make use of 
decomposition in wavelets or fractals. 

Pictures whose content changes across time are called videos or 
films. Videos are stored on the computer in data formats which make it 
possible for their active or passive data to be issued with the help 
of a computer program on an electronic output unit. Their issued 
contents are again represented in a sequential progression of single 
pictures . 

A temporally changing drawing or a process which gives the 
illusion of movement or of life in a drawing, model or (non-dynamic) 
object is called animation. With animation there is a change of 
position by the objects to be viewed or a change in the position of 
the viewer. The objects viewed in an animation are not real in the 
represented manner, but only generated by people and their tools. 

interactive films are video media or animations whose represented 
action, observation point and angle of view or represented object can 
be changed by user inputs and external commands. A request for input 
at a meaningful point in time is in this sense likewise an output in 
the frame of an interactive medium. 
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A database is a structured collection of data which are stored on 
digital data carriers or electronic data processing units for the 
purpose of later digital or electronic reading. 

Texts, pictures or films are visually comprehended. They are 
thereby part of human visual (optical) comprehension. 

Audiomedia include all media which effect an acoustically audible 
output. Audiovisual media are in this connection all media that permit 
simultaneous audible or visible outputs. 

Texts, videos or animations are in this sense audiovisual. A 
document in which more than one data convention is used or more than 
one visual or auditory representational medium is used are called 
multimedia . 

Passive computer programs are programs whose code instructions 
are not directly processed by the interfaces of the hardware inside a 
computer. In contrast to active computer programs, which contain a 
direct machine code for a processor, passive programs have effects 
only up to the lowest system interfaces of an operating system and 
have the attribute that the code instructions are expressed in a 
language which can in principle be changed at any time, especially 
without changing the hardware. 

Fonts are passive or active data or passive or active computer 
programs which are responsible for the visual representation of 
characters and symbols. They contain all the data and operating 
instructions for their size, appearance or other attributes. Fonts are 
used for the preparation or creation in an output represented by 
pixels on the output unit. 

Control statements or control programs for machines or robots are 
also active or passive computer programs which deliver an output in 
the form of a sequential string of active mechanical, electrical, 
acoustic, visual, or chemical operational steps or passive sensorial 
input steps. An output can also have the form of a query or input 
which interact with the end user at a logical point in time. 

In this sense, texts, pictures, databases, audio media, videos, 
animations, interactive films, control programs, fonts or passive or 
active computer programs, and video games, are all examples of 
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electronic documents which have been stored in a digital or discrete 
electronic representation, and which can be published electronically. 

A digital representation has the attribute that the individual 
bit data can presented serially, thus in a spatially, temporally or 
logically sequentially connected manner. These data can be received or 
transferred in a temporally sequential manner, that is one after the 
other, without the inner connection being lost which is given only by 

the sequence of bits. 

This bit information is then organized into larger contexts, 
coherences, connections or summaries as characters, fonts, sentences, 
pages, texts, pictures, sounds, audiomedia, videos, animations, 
databases, control programs, active or passive programs, and so forth, 
and thus form data units. The summarized data or data units need not 
necessarily be physically connected in the storage medium. It suffices 
if the connection is realized through a separate addressing. It is 
then obvious through a knowledge of the data format employed which 
element is respectively the preceding or the following. Corresponding 
to the data format, the boundaries are set by the elements which have 
either no predecessor or no successor. 

Data units can form a hierarchy in regard to the relations "is 
contained in" and "is a including set of". The hierarchies thus 
consist of a structure of data units, subsystems and substeps in the 
form of a graduation in regard to responsibility, function, 
functionality or sequence of the individual substeps which is in 
addition given by an order of precedence or rule of priority. 

For example, in this sense the following hierarchical order is 
naturally and functionally pregiven: character, word, sentence, 
paragraph, page, chapter, text. Elements on the same hierarchical 
level and of the same hierarchical sort thereby form a hierarchical 
class. A data unit is thereby an element of a hierarchical class. 

Within these larger summaries the individual data units of a 
hierarchical class can be linearly arranged. The data units can, 
however, also be hierarchically arranged and thus form more 
comprehensive hierarchical classes. References to other data units can 
i be contained within data units. These references can be understood as 
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jump instructions and can be . followed as a command to jump to the 
predecessor or successor in the hierarchical class. By means of these 
jump instructions non-linear electronic documents can be created, 
e.g., ones which can then be visualized in the form of a network or 
can also be designated as a hypertext. 

A structure refers to the arrangement or relationships of the 
parts of a whole to one another or their inner arrangement, together 
with the inherent relational network or its attributes. Further, a 
structure for a relational network can be made up of rules in whxch 
the elements fit together in a complex totality. The sum of all 
connections of the data units to each other or within the hierarchy. 

The structural elements are then the jump instructions whxch 
represent the exxsting arrangement instructions in the form of bit 
information, or implicitly they form a connected arrangement through 
the linear sequence, without further bit information, whereby the 
individual data elements are linearly connected and could generate the 
complete, unaltered electronic document. The structural elements can, 
however, also be addressing through name equivalency of objects or 
references within a group of elements. The structural elements which 
are used in the invention in a preferred manner are those which are 
taken from an abstract view, i.e., from the syntax, the management of 
the structuring or the visible addressing of the elements, that exxst 

within a group of elements. 

Linearity is a sequence of data units whose arrangement is one- 
dimensionally linear, whereby the individual units can respectively 
have only one neighbor in front and behind, respectively left and 
right. 

A linear chain can, however, also be singly linked, so that xt xs 
only possible to infer to the preceding or to the following element. 

30 A structure is non-linear if it possesses in a hierarchy class 

less than two or more than two neighboring elements bound through 
explicitly or implicitly assumed jump instructions without the 
beginning or end point of an electronic document playing a role xn 
this consideration. In addition, a structure is non-linear xf the 

35 linear arrangement pre-given by the unaltered electronic document has 
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been- changed. This change can be made on a hierarchical level through 
exchange or replacement of data units by — . These references 
could for. a singly Un« connection to on, or »« ident^al 
almost identica! data units at different position. 

The connection between two data units forms the iinear structural 
element. The expansion of this connection to several data units forms 
. sequential, serial or linear sequence. In this case the o~r.ll 
document is definitely created fro, its individual components, and i 
can in any case be authentically identified with the orrgrnal 

10 unaltered document. 

Without this linear structural element - forming the sequence - 
the thus separated data units could be regarded as equally entitled to 
be arranged executively and in addition arbitrarily arranged. The 
arbitrary and possibly pseudo-randomly determined deletion or changing 

ko rpfprred to as a mixing or 
15 of structural elements can also be referred to 

Mine orocess or a de-addressing process, i.e., the intended 
scrambling process ui. o . 
undoing of the addressing. The deletion of a structure element has to 
imply that the original order, addressing or naming is changed, but 
these structure elements, with their position or their assignments 
» are extracted or stored to an external device, file or database. The 

^+-«^ i & the document can oe 
original state can be reconstructed, i.e., the 

returned to the original state or transformed Into an intended 
state, if these additional information are provided as operatrng 

instructions. 

25 The structural elements, especially the linear ones, in part 

represent not- explicitly articulated information without which 
meaningful use is impossible. Information which leads to the 
reconstruction of usability, i.e., which recreates the structura 
elements, permits the electronic or human readability or usability of 

' 30 a so-prepared electronic document. 

•*-K-ir, a crarement is possibly not recognizable 
Local alternation within a statement f 

....^o 0 f a structural element, but it 
after the deletion or changing or 

■ -v, th 0 n<*w context, a meaningless, unusable, 
provides, in connection with the new context, 

contradictory, unreliable or false meaning context. 
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In contrast to a restoration in which the original state is not 
recreated, and therefore the original state is no longer recognizable 
out rather in the given case can only be inferred through additional 
information, a reconstruction is indistinguishable from the original 
state of the document. A restoration of a document can, however, be 
m ade in a logical manner so that later the arranged data can be 
provided with the context of creation, temporally, spatially, 
logically or with reference to persons and thereby make possible 
inferences to the original state. 

He can regard as structural elements of texts, besides the 
implicit linearity of words, sentences and pages, also the explicitly 
present chapter numbering, page numbering, inner page references, 
references from the table of contents to the text, page references 
from the indices, references from the text to the bibliography, and so 
forth. Labels, references or hyperlinks in non-linear hypertexts can 
also been regarded as structural elements. Essential conjunction l.ke 
-and", "or" or short phrases that already inform the reader about most 
of the text like a headline could be been removed separately by 
providing these words or phrases from external source inside the 
operational instruction as significance creating or causing structural 
elements . 

Structural elements in databases are given by database indices or 
the addressing with the primary key or foreign key or by other 
organizational data for structuring and managing a database. With a 

rn rhm p a the structure element are 
, hard disk, diskette or CD-ROM, e.g., 

included in the FAT or in the Inode table. 

With passive and active programs the structural elements are the 
linkages which arise in the variables and function through name 
equivalency, if they refer to the same source or the same object. The 
10 agreement of names in an electronic document thereby also represents a 
not further-analyzed structural element. The alteration of a program 
can also be performed within the obligatory grammatical rules of a 
programming or machine language using instructional rules so that 
checking the syntax with a compiler does not reveal errors, and that 
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error reports during the execution time of the program could not be 
used to locate the position of the change of the structural elements. 

Metadata on electronic documents that help programs on a computer 
to understand, to extract and to use the semantic or the syntax of 
statements, pictures or programs could contain several structure 
elements for organization and management by itself. But Metadata offer 
structure elements also, that are providing and showing relations x„ 
between particular shares of the electronic document that belongs to 
these data. 

With numbers the structural elements are the prefix, postfix 
operators, the right assignment to the correct order of magnitude or 
the right unit of measurement. Their alteration cannot be locally 
determined. 

The deletion or changing of a structural element has the 
consequence that all the data units connected with it lead to 
meaningless, contradictory, useless or false statements or sequence 

processes . 

The increasing spread of electronic data networks and independent 
d ata carriers (for example CD-ROMs ) , the steadily enlarging user 
circle, and the improvement in transmission and access technology for 
on-line services are also yielding new possible ways of offering and 
publishing electronic documents (or media) by way of such data 
networks, for example the Internet; such products, besides texts and 
images, also include audio or video media etc.. In addition, such 
electronic marketing channels, e.g., the Internet, open up interesting 
business opportunities with enormous advantages in the logistxcs of 
marketing and clear cost advantages in the publication process. 

With the creation of the technological framework conditions for 
electronic publication of that kind, there arises the technical 
requirement of protecting such media from unauthorised access or from 
illegal copying so that the copyright of the supplier or provider can 
be effectively protected: due to the digital character of the 
electronically published information copying (even unauthorised) could 
occur without a loss of quality; therefore the question of protecting 
35 such electronic publications is an existential and fundamental key 
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question for the public release of (digital, video, audio and print 
media etc. in electronic form. 

EP 0 665 486 A2 discloses a method with which electronically 
published media can be protected in order to achieve the aim outlined 
above . 

That method from the state of the art involves a substantially 
cryptographic method in which an (electronic) document is transmuted 
by way of a network, which document is then to be decoded on the local 
computer. In that respect the local user decoding option is based on 
authentication, which occurs by way of the network, of the user and a 
corresponding individual coding. In addition the document is 

electronically so clearly identified that identification of an illegal 
copy can be traced back to the original user - therefore at least 
legal assertion of the claims involved, after illegal access or an 
unauthorised copy has occurred, is possible. 

However that method in accordance with the state of the art 
suffers from a number of disadvantages: thus the transmission and 
computing expenditure alone is already considerable for the reason 
that a specific version of the complete document must be transmitted 
by way of the network for each identified and authenticated user; 
therefore, besides the encoding expenditure for the entire document, 
the procedure involves transportation of a volume of data which is not 
inconsiderable, precisely in the case of multi-media documents. It is 
admittedly to be assumed that in future, by virtue of powerful 
25 computing installations, this method will also operate for a large 
number of (possibly simultaneously) accessing users, with an 
acceptable access time; however there is then still the problem that 
the network capacities are possibly not always sufficient for 
transmission of the amount of data involved in the complete document,. 
30 precisely in terms of real-time operation. 

Therefore the object of the present invention is- to provide an 
apparatus and a method of the general kind set forth for the protected 
transmission and representation of electronically published documents, 
which overcome those disadvantages of the state of the art and in 
particular permit easier, more flexible and more secure electronic 
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paction of the documents, even over a data network , or, more 
generally, a data transmission medium, with a relatively slow 
transmission rate and/or a relatively low transmission capacity, 
without adverse effects on quality. The invention further seeks to 
provide that the documents to be published in accordance with the 
invention are potentially made available to an unlimited number of 
users (without respective individual complete encodings having to be 
effected for a respective user - which is expensive in terms of txme 
and computing capacity - as in the above-mentioned state of the art) . 

That object is attained by the apparatus set forth in claim 1 and 

the method set forth in claim 9. 

Advantageously in that respect the local storage of the 
electronically published document, although in a manner which is 
unusable for the user without the additional external data permits the 
non-encoded identical distribution of a theoretically unlimited number 
of identical documents without intervention in the rights of the 
supplier or provider being possible by a copying action or the like. 
On the other hand, however, an interchange of the additional data 
takes place by way of the data transmission medium or the data 
network, with which data then the locally stored document data can be 
put into a usable and meaningful form for the user by the linking 
means . 

in this respect, in accordance with the invention, the expression 
„data transmission medium" means any electronic device for 

HAi-* and "data transmission network" means any 
>5 transmitting data, ana udua 

•♦■y, whirh data can be exchanged or transmitted 
electronic network with which data cem 

, ^. .^.i arpa Transfer media could be 
between computers, beyond the local area. 

wired or non-wired phone lines, any cable capable for information 
transfer, any kind of broadcast like terrestrial or by satellite, or 
30 any kind of memory with input, output interfaces and which is able to 
perform data processing operation. 

As in particular it is also possible that transmission of the 
data for decoding the documents is effected by way of a terrestrial 

ww of satellite, in which case for 

television transmitter or by way or satem 

nlace bv way of a data line, the 
35 example the inquiries also take place Dy y 
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expression "data transmission network" is also to be interpreted as 
any electronic transmission medium with which - beyond the local area 
- the data can be exchanged between computers or data can be requested 
by way of a transmission medium and received separately from saxd 
medium. 

For that reason it is possible in accordance with the invention 
for the local data storage means to be interpreted as a television 
transmitter or other wide-band transmission medium, by way of which 
the same (volume) data are always periodically transmitted while a 
second slower channel individually supplies the additional data (a 
possibility for example is also an arrangement similarly to the 
principle of the Near-Video-On-Demand, as is broadcast for example by 
way of satellite) . Accordingly the local data storage means according 
to the invention may therefore also have a means which is designed for 
the reception of periodically transmitted data by way of a wide-band 
channel . 

in general, units which can be in the direct physical access of 
the user are meant as "local" . 

Generally, also a procedure or the content of a message may be 
called secure if the technology or personnel needed to illegally 
obtain the message effectively cost more time, money or energy than 
the maximal profit that anyone expects to gain by cracking the 
security system. 

security could be guaranteed by encryption or by hiding or 
disguising the data within a large quantity of other data or by 
assigning data a secret meaning or a secret allocation to certaxn 
functions agreed on in a secret communication before or after the 
mutated operational instructions are given to the final user. 

Advantageous developments of the invention are set forth in the 

30 appendant claims. 

Thus in a particularly preferred form the electronically 
published documents are stored in the local data storage means in a 
non-linear form, wherein in connection with the present invention the 
linear" is to be interpreted as follows (in addition to the 
definition given in the introduction of the present application): 
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llnMI media, that is to say media which can be interpreted as a 
Unear chain of pages, image, or other information carriers, compose 
a number of contents or content carriers ,in the case of printed wor k s 
therefore for example pages, which are connected together by way of a 
structure (therefore page numbers or the physical arrangement an . 
printed boo,, and which are put into a meaningful sequence. 
Therefore, by means of the structure elements, even a document 
comprising a plurality of non-linear content carriers which are stored 
in any sequence and which therefore cannot be used as an overall 
document for a user can be put into the form of a linear, usable 

structure . . 

in that respect, therefore, the additional data prov.de a 
directed or oi-d.rectional connection (link) between two separate 
parts of one or more documents. Linearity of a document therefore 
denotes the simply scaled sequence or arrangement of the individual 
information carriers while non-linearity in the present sense is the 
deviation from a linear arrangement (at least of parts) of the medium. 

A particularly suitable form of local data storage means that can 
be used is a permanent storage means, for example in the form of an 
optically readable CD, which can be produced at low cost in large 
numbers. Then, the individual information carriers of the document 
could be stored on that CD - in non-linear configuration - in an 
arrangement which differs from the natural document sequence, without 
the CD additionally containing data or items of information about the 
5 arrangement of the information carriers, into the usable sequence. On 
the contrary those additional items of information which firstly bring 
about linearity of the document would be supplied externally by way of 
the network. 

Alternatively, in accordance with the present invention it is 

linDaHt . v in the local data storage means m 
10 possible to achieve non-linearity in tne 

4- crnrsH i-herein has a number of data gaps, 
such a way that the document stored therein 

without the data content of which the document is unusable for the 
user. Data filling up those data gaps can now be brought about either 

~i H=>i-a qmirce bv way of the network 
as additional data from the external data source oy y 

ko stored locally - although separately from the 
35 or the gap data can be stored locaiiy 
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remaining document - and as external data, once again only linking or 
index data would be provided for linking the gaps and the associated 

gap data. 

in accordance with a preferred development of the invention which 
in this respect is to be considered as the best mode of carrying the 
invention into effect the apparatus according to the invention 
additionally has an encoding means with which the additional data that 
are transmitted by way of the data network can be encoded in order on 
the local side further to enhance the security of usable access to the 
documents: an interchange of the additional data - that is to say for 
example the sequence or gap data - , which interchange is protected 
from third-party access, preferably occurs in the mode of a code 
agreement, which forms the basis for the encoding procedure, between 
the external data source and the local computer system, and xt is only 
after local decoding of those additional data that they can be 
processed by the linking means to afford usable documents. 

in a further preferred embodiment there is provided an 
identification or a billing module with which items of information of 
the user can be ascertained and subjected to further processing, that 
is to say for example for the purposes of charge ascertainment and 
billing. (As a distinction in relation to the state of the art 
referred to in the opening part of the specification and concerning 
the general kind of system involved, identification of the external 
user by the data source is only necessary for that purpose) . Between 
> the host and the user there can be defined an electronic currency in 
the form of random character series which can be used only once ("one- 
time pads") which permits the user to pass on his rights in regard to 

reading the documents . 

Also, in accordance with the invention, a control module- provides 
10 for the friction-less data exchange with the external data source 

-v. ~* n r- 0 ensure that unauthorised copying and 
The invention can therefore ensure tnau 

dissemination of the document, is impossible; at the same time however 
it is possible at the local user end not only to tolerate but possibly 
even promote any copying or transmission of the locally stored 
35 document data in order thereby to attain the largest possible 
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potential user circle for the electronically published data. At the 
sam e time there is the advantageous • effect that, in accordance wxth 
the invention, the volume of data to be transmitted by way of the 
networK from the external data source is minimised and is limited only 
to the additional data according to the invention. In addrtxon 
further optimisation in terms of data transmission from the poxnt of 
vi ew of amount and time can be achieved by compression of the external 
additional data (or also the locally stored document data) . 

in data formats, layers are used to make structures and changes 
mo re clear in the different levels of abstractions. These layers could 
include information about the position of important data or meta 
information about the format used, compression parameter or other 
description on the structural elements used. Changing the order of 
elements on a certain layer, with respect to the grammar rules that 
must be applied on this layer, implies that there will be no algorithm 
of reconstruction for the original sequence. 

Changes in the sequence or order with respect to the grammar 
rules of a given layer, data format, formal language or human language 

^hori-shlp error in these statements, 
implies that there is no detectable error 

Therefore there are no criteria, to be found by observing the changed 
statement, that can assist in determining which of the possible 
combination of the smallest entity in the layer, respecting the 
grammar rules, is the correct and original one. 

The grammar is given by rules that regulate the syntax in whxch 
25 the use of characters within a language is complete, consistent and 
contained. 

Therefore, in accordance with the invention, in a development 
thereof, it is possible, using the redundancy in speech, to insert or 
displace words at different positions within a sentence without the 
30 content or the meaning of the sentence being affected thereby. That 
advantageously provides that individua! identification of the source 
of illegal copies can be achieved by suitable individuated 
positioning of individual words. More specifically, in particular the 
separate transmission of the additional data (that is to say for 
35 example the sequence data, can be utilised to introduce a clear, 
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subseguently identifiable word transposition or word combination which 
has no influence in terms of content. 

in order to identify the final user of an electronic document. 
th e restoration of a document could be don. within the grammatical 
rules of underlying data structure. Because not all changes or 
aeletions of structural events render a document useless, rules for 
hierarchical classes, layer or data structure could be derived that do 
„ot guarantee a change in the meaning or context of a statement on 
the other side, rules exist that certainly change the meaning of a 

, Q a„ tTO e of numbering (Arabic 

document. For example, a change m the type 

ir,v,=hpHral etc ) in an ordered list does 
numbers, Roman numerals, alphabetical, 

not change the meaning of a text, furthermore, the order of an 
unordered list of variables which are assigned to independent values 
usually has no influence on the operation of computer programs. On 
other hand, rules that change or delete structural elements after a 
punctuation mark which are applied to electronic texts resuit » 
prepared document that probably has no usable content. 

A method to identify the final user is that statements or 
paragraphs with the same . content . but a bit differently prepared could 
be Kept in the public part of an electronic document in parallel, so 
that a combination of different statements containing only small 

„ , t-hocp rlues could be used for a 

differences is uniquely prepared, and these clues 

subsequent identification of illegal copies. 

Hierarchical classes are similar to layers.. Operations on a 
; level could be done by rules that change or delete structural elements 
with respect to the grammatical rules due to the order and sequence 

v,- ni a<! = PS These rules transform the order of 
inside this hierarchical classes, inese 

the original data into a new order in the group of accompanyrng 
entities that therefore contains no errors in the grammar rules used. 
10 in pictures the hierarchical classes are lines or columns, frames 

or interframes in MPEG coding, elements in databases of the same data 
structure. Assigning variables to certain values or groups c 

♦-v^t- rould operate without 
statements in computer programs that could p 

_ . Q , rAntP v t bv a definite input and 
instructional errors in a contained context ay 

35 output are likewise hierarchical classes. 
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- „ accordance with further preferred developments of the 
invention, the method according to the invention 1. carried into 
effect in that the procedure according to the invention 1. conducted 
in platform-independent mode .that is to say independents of hardware 
or software system environments used, and additional routines for 
integrity checking are incorporated, with which it is 
ascertain whether the external user is properly accessing or whether 
inadmissible attempts at access are being undertaken. 

m accordance with the invention, therefore, the method and the 
apparatus can be used to provide that the user may only apply 
precisely defined processes to the documents - for example print- 
out can be permitted, but this can also be excluded by means of a 
suitable device (and possibly external control by way o, the network . 
In addition, the invention ensures that storage of the locally 
; generated, us.bl. document information is not possible. 

In addition, in accordance with a development, an electronically 
published document can be provided with an electronic, expiry date in 
absolute or relative form, in which case also the intended aim o the 
expiry date cannot be foiled by manipulative measures at the local 
, computer system as a corresponding item of data which is linked to a 
document is always dependent on the external item of data transmitted 
oy way of the network. Updating operations and the like for the 
document can be effected in a corresponding manner. Cenerally the 
possibiUty to provide security according to the invention always 
25 means any opportunity to update such an electronic document. 

To judge the effectiveness of the protective procedure presented 
here, the following concepts can be referred to with regard to the 

present invention. 

Generally, information is treated as a fundamental entity, like a 
30 messages which are exchanged between source and receiver The 
protection of the information results from the question of how large 
the share of information is that can be obtained by an active or 
passive auditor or eavesdropper from the coding employed. The 

- „ of this description results from the circumstance that 

inadequacy of this aesciiFH" 

„ hu nor in t he information and coding theory 
35 neither in cryptography nor in tne 
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information has a semantic meaning or context that is addressed to. 
Within these theories there is no semantic level, and thus there is no 
technically or conceptually usable meaning for the concepts of 
context, redundancy or logical usability. 
5 information content is, as negative entropy, a measure of the 

unexpected content or surpr.se in the content which a message or 
information contains. The numerical sequence 1-2-3-4 contains, 
according to information theory, the same information content as every 
oth er combination from 1 to 4. If a combination of independent numbers 
10 1 3 2 , 4 is to be returned to the original form 1-2-3-4, then 
information about the sequence must be given in the form of an 
operating instruction which was not previously explicit in the 
original numerical sequence 1-2-3-4. 

Given the internal redundancy of language, data formats or file 
15 formats, very often the next element can be predicted with a 
probability above chance. Thus in the German language it can be 
inferred with high probability that an "e« will more probably be 
followed by an "r» than a "y" . Likewise, it can be expected with high 
probability that a grammatical article will more probably be followed 
20 by a substantive than a verb. Nevertheless, these attack variants on a 
mi xed or de-addressed data unit indicate that the deletion or changing 
of a structural element will not offer any clues for the 
reconstruction of the sequence. The divisions within sentences would 
thus be disadvantageous. With the deletion or changing of a structural 
25 element within a word, e.g., with a hyphen, one can usually find the 
precise continuation of a word by using a dictionary, and thus the 
reconstruction of this structural element is possible without the use 
of external data. 

• nrr^nnprnent of bit information which, for 

Through the logical arrangement oj. 

. i ph^rprtPrs reveal whole sentences, 

''30 example, through individual characters 

j- *. • r-ai-i t-he*n receive a semantic 

statements are created. This information can then recei 

• waning in regard to a selected data convention and together with its 
creation- or meaning context. This meaning is in addition socially 
determined. The meaning of the individual sentence implies more or is 
35 more precise than the sum or the intersection of word meanings, and a 
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text meaning 1. correspondingly more than the »■ or is -« P-ise 
than the intersection of the sentence meanings. 

By fixing or scrambling entire paragraphs or sentences in texts, 
. g by the use of punctuation marks or by de-addressing within an 
electronic document, the separation of a semantic statement from its 

context is achieved. 

to understand a semantic statement A we always need a knowledge 
of its context. The context is, however, by definition not part of 
this semantic statement A . The context can make a statement appear to 
be meaning-related, reference-related, language-related, world-related 
or use-related. The context consists of the surroundings rn 
statement is understandable. The statements in a sentence, paragraph, 
page, text, video, program thus always need the context which results 
from the other statements which are connected in parallel or 
sequentially in the immediate or indirect surroundings. 

Alone the deletion or changing of the natural sequence within 
more comprehensive semantic statement creates a set of independent 
statements which possess no information about their original rnn.r 
connection with neighboring statements. The reason for the use of thr 
procedure is the fact that on the semantic level the entire statemen 
is more than the sum of and is more precise than the intersection of 

the individual statements. 

A sentence represents a substantively closed data unit about 
whose continuation one can only specuiate but not even in a 
probability-oriented manner. An application of redundancy or the use 
o, redundancy in the independent reconstruction of an electronic text 
is in principle not possible on the level of semantics due to the non- 
inferable context. For these fundamental reasons it is impossible to 
discover an algorithmic approach to recognizing how a sentence 
paragraph, video or program has to be completed. Neither on the 
electronic, technical level, nor as an instruction to the human mind 
can a reconstruction of an electronic document consisting of closed 
substantive data units be carried out, if the structural elements are 
lacking . 
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. A further advantage that justified its effectiveness that several 
hidden information, like the destination of a hyperlink or the current 
page number has not to be displayed. A clear text attack by use of the 
complete output and the access to the complete prepared electronic 
document does not necessarily offer all information of the ongxnal 
document. The jump addresses in hyperlinks and the corresponding 
destination addresses could be delivered by the external operational 
instructions as well. Furthermore, fake reference or destination 
addresses could be included so that the completeness of an illegal 
reconstruction and its quality could never been proven by an attacker. 

The invention employs especially the linear structural elements 
between semantic entities or the de-addressing of frequently appearing 
names. These structural elements must not necessarily be contained in 
digitally coded information in the original data. If these structural 
15 elements are removed from an original, a so-prepared electronic 
document can be restored to the original state only with the aid of 
externally introduced operating instructions. 

An electronic document can thereby be viewed as a passive or 
active program which runs only on a linking intermediate layer, thus 
on a linking unit which cannot be circumvented and which it is not 
reasonable to circumvent. This linking unit transforms all the code 
instructions contained in this program into code instructions of the 
original document, so that only the thus-arising data leads as direct 
electronic instructions or as instructions for the superordinated, 
higher or lower program interfaces to meaningful results. These 
instructions on the linking unit can be realized within the processor 
hardware with conventional electronic integrated circuit techniques. 

The linking unit brings volume data and data externally obtained 
e.g. from a network or from a locally protected data area, that is 
30 temporarily used but by network updated, together in order to achieve 
a restoration by using them as operating instructions and for the 
creation of the structural elements so that the original structure of 
the electronic document is restored or reconstructed and thus can be 
turned into a later output. 



20 



25 



WO 97/48034 



20 



PCT/EP97/03113 



15 



. Programs, such as for example a text program, a viewer for 
pictures, a video or audio-player, a database management system 
implemented for a database, a virtual machine on a client computer, m 
whi ch programs can be started from the network or from a locally 
5 protected, temporarily used and by network updated, data area can 
possess a linkage unit which inserts structural elements in prepared 
volume data by separately added operating instructions, in order that 
afterwards the reconstructed electronic documents can be represented 
on an output unit, reasonably, usably, consistently, reliably and 
10 correctly. Furthermore, the protection can be realized in such a way 
that it is not immediately recognized whether the document is really 
complete and usable after an illegal reconstruction. 

An advantage to the state of the art technology is that an 
illegal or unauthorized reconstructed electronic document is different 
to original published data because it contains structure elements that 
were deleted or changed in the original. Because the illegal copy is 
delivered by some unknown or unauthorized source, the final user can 
never be sure that he really got a electronic document that is 
equivalent to the original one from an authorized source and that this 
fake copy really offers a meaningful, reasonable, usable, consistent, 
reliable and correct content as was intended by the original 
publisher. The separate transfer of the structure elements by 
additional instructions ' from a known source that is always carried out 
on demand, guarantees integrity and correctness of the delivered or 
used document. If the client software is able to identify the source 
for sure, which can be done by conventional state of the art 
cryptological protocols, then an unauthorized insertion like spoofing 
could be identified by the final user, because reconstructed parts of 
the changed documents will lead to some meaningless and unusable 
30 output, that will easily be recognized by the final user. 

in the same reliable way a time restriction could be included in 
a document. This feature can also be used to include this limitation 
from the external operating instructions. 

The insertion of a sequence for the reconstruction of the context 
35 is an important instrument for the management of documents. In a 
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subsequent, flexible alteration of this document through an altered or 
expanded edition, old sentences or paragraphs can be left 
delivered in a new order by means of separately added structural 
events. By the transmission of the few data which have changed 
between editions a desired alteration during output is made possible 
on the output computer by means of a structural element that results 
from a reference to the newly inserted passage. 

update-management which brings electronic documents up to date is 
th us an additional advantage of this invention which goes beyond 
protecting the documents against unauthorized distribution. The 
repeated transmission of data which are already available on the local 
computer is made superfluous. Even programs can be efficiently, 
flexibly or rapidly brought up to date or expanded. 

A further advantage exists in the possibility of making the 
distribution of operating instructions dependent on payment. The use 
of electronic documents can be paid for by using a pay per use 
procedure. Only a small amount of data has to be exchanged by some 
sort of money, electronic payment or MicroPayment . The correct 
operational instruct.cn need to provide for a share of the electronic 
document a down payment, that will be sent by the end user at the 
client in advance. The marketing and sales of information can then be 
oriented to the actual use of the electronic document. The sale of 
unused services or an unused information presentation can thus be 
avoided by a final client. Therefore, the data of a prepared 
eiectronic document could be free, only the data needed to create the 
usability and readability must be paid for. In this sense, this 
concept offers a technology for super distribution. 

The release of an electronic document by external operational 
instructions can be done by central or decentralized servers. 
30 Because all usage rights are offered by external server, the 

final user does not necessarily have problems with a backup. He should 
only store the internet address where he original found the electronic 
document and his personal notices all other information could be 
stored on a external server and can be delivered via network. The 
35 management of usage rights could be done by a releasing server. 
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Therefore, a small sized recovery could be 



services . 



m comparison to some other copyright protection methods neither 
actional hardware will have to be used nor given hardware needs to 

be modified. 

ft reduction of quality in the electronic document could be 
included in its data by replacing the bi-directional structure 

linear chain. 

, in animation, data formats like FLI . FLC, OpenGL. GKS or VRML are 

used for interactive and non- interactive 3D presentations. In VRm. 
objects are described by more elementary geometric objects with 
spati.i relationships in between and allocations to the assigned 
object of properties like transparency, color, texture, sound or 
l5 constraints on motion. Structural elements, like relative positron or 
the assignment of a property to the original value, could be altered 
for reasons of security or updates. An unrecognized change rn the 
assigned property could also be used for , restoration, in order to 
identify the person who has misused documents, when accompanying data 
20 are stored in a releasing server. 

Passive computer programs are usually utilized on multitask 
mul titnreading or multi-user operations systems. These programs are 
complied to the language special to the operating system and not for 
tne processor, with its restrictive machine language. The statements 
25 of these passive computer programs refer to functions, which are 
included and collected in libraries and coded in a machine language of 
the processor. The reference of a statement in a passive program to 
the program library is a structural element that could be removed and 
could be used for a later reconstruction for security or update 
30 reasons. 

The machine language could also be changed with respect to the 
grammatical rules of the processor language. This change could be 
ma d. by altering the data addresses or the order or sequence of 
grammatically independent groups of fundamental entities. Only wrth a 
35 few operational instructions, delivered by external sources, is a 
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linking unit able to reconstruct the usability of a machine code. 
Tnese active computer programs could be used, e.g., on special purpose 
hardware or on computers intended for non-general purposes. 
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Further advantages, features and details of the invention will be 
apparent from the following description or e*odi™ents with reference 

to the drawings in which: 

Figure 1 is ' a diagrammatic operating circuit diagram of the 
apparatus according to the invention for protecting 
electronically published documents in accordance with a 
first preferred embodiment with additionally illustrated 
possible developments, 
Figure 2 shows a flow chart of the method according to the invention 
for protecting electronically published documents m 
accordance with a preferred embodiment, 
Figure 3 shows a flow chart of an updating and test method which is 
carried out in the context of the method shown in Figure 2, 
and 

15 Figure 4 is a diagrammatic representation of an electronically 
published document in the protected non-linear state (a) 
and in the state (b) of being treated in accordance with 
the invention and linearised by the addition of linking 
data . 

A n electronic network 10 which can be any private or public 
network for connecting a plurality of electronic data processing 
installations for the purposes of data exchange between them, and 
which in the present embodiment is the publicly accessible Internet, 
forms a connection between an external host system, delimited by the 
25 line 12 in Figure 1, and a system comprising a plurality of local 
computers, delimited by the right-hand line 14. 

While the host system 12 is operated by the supplier and 
distributor of user data which are to be supplied electronically by 
way of the network 10 - in the illustrated example, being graphic data 
30 - the local computer is provided for calling up and representing the 
user data supplied by the operator of the host system 12, at the 
location at which the local computer 14 is disposed. For that purpose 
the local computer 14 has a processing unit 16 which is bordered by 
the broken line and which is connected on the one hand to a document 
35 store 18 and on the other hand to an output unit 20 and an input unit 
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22 -and which co-operates with those peripheral devxces. 
processing unit 16 is also adapted to co-operate with the network 10. 

The document store 18 - so-to-speak the local document delivery 
unit - is designed in the present embodiment in the form of a local 
5 mass storage device which is directly connected to the processing unit 
and which already contains constituents of the document to be 
electronically published by way of the network. The output unit 20 
forms the connection between the local computer 14 and the user and xs 
selected in dependence on the document to be published: in the present 
10 case of publication of electronic drawings and graphics, the output 
unit 20 would substantially comprise a monitor which is suitable for 
the representation of such graphics, with associated data processing, 
while in other situations of use - for example involving the 
transmission of texts or additional sound as in the case of audxo- 
15 visual electronic media - an acoustic output unit, a printer or the 
like may additionally or alternatively be connected. The input unxt 
22 is for example in the form of a keyboard or mouse and serves to the 
user for procedural control or for the input of commands for callxng 
up the documents which are electronically published in accordance wxth 

20 the invention. 

As a component the central processing unit 16 has a code unxt 24 
with associated code store 25, a document structure or constructxon 
m odule 26, a dialogue control module 28 and a clock 30. The Figure 
does not show a communication module which is provided for co- 

25 operation with the network 10. 

in comparison, provided in the host system 12 is a code server 
module 32, a copyright server module 34, a billing server module 36 
and - optionally and in accordance with a preferred development - a 
document or update server module 38. 
• 30 The function and mode of operation of those modules are descrxbed 

hereinafter, wherein in the present embodiment the functions of those 
modules are preferably effected by suitably programmed software in the 
host system 12 and in the local computer 14 respectively; however, as 
will be readily clear to the man skilled in the art, those modules 
35 could also each be in the form of discrete hardware modules wxth 
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conventional .1— ic Circuity technology which is wired in the 
specified manner in principle and moreover in a manner with which he 
av erage .an skilled in the relevant art 1. familiar. The te m 
.. serv .r" refers to the arrangement of the respective module in the 

host system. . 

The purpose and function of the code unit 24 (also «a M n g the 
dat a safeguard unit, is to provide for a code agreement in the data 
exchange with the code server module 32, that is to say to 

safeguarded against any access and with which then the code unit can 
decode an item of sequence or gap information transmitted by the 
copyright server module 3, and prepare it for us. by the document 
construction module 26 in the local computer: by means of that decoded 
item of seguence or gap information the data construction module 
t „en accesses the data ban, of the document store 18 and uses the item 
of motion of the copyright server module, which is received over 
th e network, in order to process the unordered or gappy data of the 
data store 16 to afford complete user data which are then made 
available to the user by way of the output unit 20. 

While the dialogue control module 28 controls co-operation in 
accordance with the protocol of the functional modules or correct 
execution of the method (to be described hereinafter, , the clock 
serves additionally to process possibly periodic user 
for example moving images - in a manner which is suitable for 



25 user 



30 



35 



Finally, on the side of the host system, the billing server 
module 36 is provided for correct identification of the local user, 
ascertaining the extent of use thereof at the documents published by 
way of the network, and finally generating appropriate billing data 

The document/update server 38 is finally provided for the 
purposes of use in which not only seguence or gap informal 
concerning document data which are stored or present locally (document 
store 18, are used, but possibly additionally or instead thereof such 
data are supplied (published, by way of the network, for example in 
the respective most up-to-date form present at the operator host end. 
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In -addition, as will be set forth in detail in the following 
description of the method according to the invention, the module 38 
serves for updating operating system components at the user end. 

The procedure of the method according to the invention for 
protecting electronically published documents will now be described 
hereinafter with reference to the method flow charts in Figures 2 and 
3 with reference being directed to the embodiment described wrth 

reference to Figure 1. 

in order clearly to set forth the method and to describe a 
possible form of local storage of the document data (in the data store 
18). attention is additionally directed to the view in Figure 4 
showing by way of example user data arranged in the storage sequence 
and the processed form thereof. As shown in Figure 4 (a), an item of 
electronic graphics is deposited for example in eight physically 
successive storage locations in the data store 18, wherein the 
sequence of the physical storage locations 1 to 8 with the information 
units arranged therein, as shown in Figure 4 (a) , does not correspond 
to the usable (useful) sequence which is meaningful for a user - on 
the contrary there is lacking a sequential link between those non- 
linearly stored data units in order to arrive at a meaningful 
comprehensible graphic data file a-b-c-d-e-f-g-h (Figure 4 <b, , . 
However that sequence information which in the illustrated embodiment 
in Figure 4 would correspond to the arrangement of the respective 
physical storage locations in the sequence 3-2-8-1-5-4-7-6 is not 
contained in the document store. 18 but is transmitted from the host 
system externally over the network 10. 

At the beginning of the method according to the invention a 
network connection is made for the host system 12 by way of the 
network 10 to the local computer 14; that network connection depends 
3 on the conditions and protocols which are necessary or typical for the 
network 10 used. 

There now follows in the flow chart of Figure 2 the execution of 
an updating and test routine (indicated at A in Figure 2, illustrated 
in Figure 3), which will be further discussed in detail hereinafter. 
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. In st e P S10 the integrity of the local system is then tested - 
therefore . test is made by means of inquiries and test procedures to 
ascert ain aether misuse attests have been made in the 
system or precautions are involved in respect thereof - the loa 

5 computer system is initialised for the subse q uent code and data 
excise with the host system and the necessary identif icatron and 
billing data with the billing server module 36 are transmitted. 

The subsequent cod. agreement in step SI! then involves the 
transmission of a code from the (secure, code server module 32 of the 

,„ host system 12 to the local computer; the code unit 24 stores that 

code in the code store 25. 

in step S12 the local computer then receives the encoded sequence 
signal, that is to say in the example shown in — .the numerical 

A 3 2 8 _!_ 5 -4-7-6, in a form which is encoded by that in 
sequence 3-28154/, 

15 accordance with the code agreement (step SID . The code 

store 25 then permits decoding of that sequence signal m step S13 by 

the code unit 24. 

There is therefore ready for the document structure or 
construction module 26 the (decoded, sequence signal with which the 
20 module 26 can now access the document store 18 and process the data 
stored therein, in accordance with the received and decoded sequen 
i„ readable and usable fashion (step so that then rn step 

those processed useful data can be outputted by way of the display 
screen output unit 20 and/or a printer unit 40. 
25 in step .16 the system then checks whether there is either a 

corresponding user input or inquiry for further documents to e 

. „ r uhether due to the nature of the electronically 
processed, or wnetnei, «u= 

^- lTT , fh-re is to be a continuous 
published document - for example a film there 

Ld-out of data from the data store 18. The solid-line arrow 42 
■ 30 describes the path of that feedback loop which goes bac* again to a 

w * ^ ctpo S14 - document construction, 

location before the step ^j-** 

Alternatively the method could also involve feedback connections 
to other earlier method stages: thus for example, in the manner shown 

36 prior to the step 312 so that in this case the local system would 
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5 1 at a location before - step SU .arrow 46, , in that 

1 cod. agreement ™- be — and then the subseguent loop would 
routed again^ ^ im £oregoing that security o£ 

„ nnK U» g data can be further enhanced in particular by loops with 

10 the arrows 44 and 46 respectively. 

describe the upstream-disposed procedure as indicated by 
describe tne P effected in accordance with a 

Figure 2, namely updating, which is effected 
preferred development of the invention, of the operating 
15 H ^formed on the local computer for reception of the electronically 

published documents co „ sid eration that operating 

That program is basea on ^ 
3o£ tware of that k ind on the one hand can determine - 

20 i::;::;:; — — ~ t 

iilustrated example the programing language ,ava is used to carry o„ 

the described method. The system also uses a security module which is 

inte ted into ,ava in order to guarantee protection of the encoding 
integrated ^ ^ ^ opetating pcog „ m 

procedures. It is p . rma „ently modernised and 

environment on the local computer 14 is p.rman y 
updated, while technics and procedures for detecting misuse are also 
b e ng c ntinuously further developed so that it is not always 
up-t -date version that is to be found on the respective local 



25 



computer 14 
By me 



35 



B y means of the routine described in Pigure 3, it is now po sib 
not only to put the local operating system environment ^ int t 
recent state by way of the external host system 12. but it is 
possible by way of that updating operation externally to checx 
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the- local user is operating the local computer system H in the 
authorised ana proper manner, that 1. to say whether the situation 

involves integrity. ^ 

I„ step S20 the operating program - in th. present embodiment 
5 running under »v. - is started, whereupon then in step ,„ the 
prolan, ma.es the connection to the extern,! host system 12. Step S22 
th e„ involves inciting whether - -pared to corresponding 
identification data - the local system 1, has the most 
version; if that is affiled, the routine reverts to the method a 
10 shown in Figure 2. « however it is found in the * 
that the locally operated version is not in the newest ■««•<«»' ^ 

. ,»t in step S23 and started (S24) and the old 
newest version is sent in step o ..-.«„, 
version is terminated (325, - That now provides the prerequxs.te 

■h*d inteqrity to be checked in subsequent step S10 (F.gure 

the prescribed integrity ^ 

IS 2) bv security routines. 

In particular in that way. even when a successfu! attac* on the 
content of a document is Known, a reaction can he immediately afforded 
by virtue of the fact that the Java operating 
correspondingly altered and thus similar repetition of that violation 

?n of protection is impossible. 

Besides the ahove-descrihed method steps it is necessary 
accurately to define and possibly limit the procedures to he applied 
bv a user to the electronically puhlished documents. Tor example 
output onto a printer 40 would in fact per.it copying and unauthorised 
25 duplication of the document on paper, although admittedly with a oss 
of q uality. in addition it would be necessary to ensure that (local 
access to or storage of the outputted data .step SIS or documen 
structure/construction module 26, is not possible so that here too it 
is not possible to re-use the data, that is to say misuse is excluded^ 
' 30 In the manner described in accordance with the invention, by 

electronic publication, for example a .locally, stored document can be 
provided with an expiry date which is produced by configuration of 
Ja va program and which is either predetermined as an absolute date ,in 
th. form Of a defined moment in time), or it is possible to allow a 
35 right of use which is limited in terms of time ,n hours, , both options 
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. A r t hp user, in the manner 
however require on-line access on the part of the user, 

according to the invention. 

In accordance with a development of this aspect a document could 
require further updating procedures dua to its expiry data. That 
development appaars to be particuiarly suitable for refarance books or 
manuals, teaching organisations or the like. 

A further advantage of this invention could ba seen in the 
ability to restrict and register the access of a certain person to 
confidential information. Therefore confident! and non-disciosed 
digital material could be controlled by a remote releasing server. 

An anonymised signal which is sent out from the (transmitted, 
document could indicate to the external host system how frequently the 
document is read or called up: in a corresponding manner it would be 
possible to detect a period of time or other, on-line media-specific 
data, so that there is the possibility in a simple and usable manner 
of acquiring data for improving the on-line publication availability. 
,» addition constructive market investigations or the like are also 

possible. hh) 
in quite specific terms the present method involves highly 

effective copying protection in relation to media stored on Compact 

„f the CD serving as a local document store 
Discs (CDs): copying of the CD servxx y 

! 1R in Fiaure 1 and Figure 2 respectively) could not 
(reference numeral 18 in tigure ± ^ 

be prevented even if the data were stored on that CD in the manner 
shown in principle in Figure 4. provided with gaps, or put into a non- 
5 linear condition in some other manner; however the copying procedure 
would be meaningless for the unauthorised user. on the contrary, with 
this aspect copying of the local data store would even have to be 
considered as desirable as that enlarges the potential circle of users 
and use is possible in any case only by host contact. 

in that respect the method according to the invention is not 
limited to separate transmission or addition of a sequence of the 

■ in Fiaure 4; on the contrary, 

(non-linear) document data as described in Figure 

it is additionally or alternatively possible to store a document with 
data gaps in the local data store and then either to supply the 
35 associated gap data externally by way of the network or also 
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„ store same in order then externally to supply only inline, or 
locally store same l " the gap da ta and the 

linuna information relatrn, to individu al words 

(r est of the, document. Those ,aps can be " > lt s edly 
of a text document, m ^ ™ ^ „ ^ or short phrases 
occut ln a usable sequence of » - ^ data » ^ usage 

v t-o an intended displayed position. 

/ nt , a vi ewer is necessary for representing the text, 

or tvped documents, a viewer xo f or 

such" vrewer havrn, a limited and ^^'^"^^'Ji* 
example the output unit must have a copymq and pr t^ op 
C a„ he activated or deactivated -ernally t - ^ J J„ eIated 
Th at viewer should also prevent unauthor = d « .ess ^ 

— MhUe rZl^"—^ i^tant considerations 
PDF, in regard to practical , nitabi iity in connection with 

m functionality, or ^ respectively 

current software P acKa g e .. m th co ^ ^ 

) should be able to serve as a basis to 

solved in the publish^ industry. _ ^ ^ 

A further aspect m regard P 

,,-;t-H4n the documents in order 
~f a i l oaae references within tne 
erasure of all page j. case then those 

secure data storage, in which case 
prepare them for local secure control ied manner) for 

n«v«: can be produced again (m controne 
'5 necessary links can r>e y network. 

k »■>,„ items of sequence information, over the netw 
document usage by the items q accordi ng to the 

in the case of so-called hypertext media, a 
mention can already be involved by removal of the so-called 
the speech-inherent connecting ^ ^ ^ ^ 

3 0 Digital Videos or films P full - B i«e and full 

File format. Digit.! videos can be delivered i ^ 

e , rpams uncompressed or t>y usmy 
motron vrdeo streams, P ^ ^ „ ich 

accepting a loss of quality, th transmission 
special compression methods, constant or — ^ int o periodic 

v^o^rl in MPEG Format a video is sepaia 
35 rate are achieved, in u^e. 
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individual high region pictures or f~.es, provided in an 
I aframe =odi„ g . - int.rframe coding by forward predicted rames or 
^-directional predicted frames is used Co encode the deferences 
t„ „ frames. By changing the order of the delivered intraf rames or 
I erf rames the guality of the digit.! video stream could be reduced. 
. reconstruction of a high guality image can be done by rearrange 
the correct seance in the viewer with additional operatronal 
instructions on an accompanying layer of the protocol. 

Diff ere„c methods of compression are applied to data wrth h lg h 
redundancy, compression can he differentiated into 
.lossy, and in no duality loss coding. Accordingly, in lossy codrng 
irrelevancy is also eliminated. 

» compression methods error correction or error recovery methods 
or audiovisual synchronization or discrete Fourier or cosrne 
transformations are usually applied, changes in the order or sequence 
at . certain position in a compressed data stream can he de ted 
though not located by algorithms, and they have a large rmpact on 

^ t-v^ usability of the decoding data, 
decodinq process or on the usaDinty 

JtLse management systems handle fixed and variahle data types 
differently, spending on the handling of lists "ura 
length Of variahle data records, the modificatron of 
elements would reduce the duality of a datahas. and affect 
performance and reliability of the content. 

T he electronic publication process described could also 
26 generalized under the invention as follows: 

order to mate security measures independent of the type o 
data transmission, the process is structured or is operated 
, v Data o£ the so prepared electronic documents are sent 
asynchronously. Data or f Ar 

to the customers in an open or public manner by e.g. Cos. broadcast o 
30 via internet. The readability is arranged by a direct customer contact 
with a releasing server, through which the user payment is made. 

„t« a payment or a releasing is completed the operation 
instruction has to be delivered in a secure manner to the program that 
reconstruct the original document from an external source. 
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. This tracer could be done by an online connection of the drent 
to the server. On the Internet these connections are reaped by one 
or several steps in between. The message that has to be delivered to 
the client might be stored on several gateways or router temporarily. 

A synchrony or an online contact between fina! user and server is 
not necessary as long as the transfer is realized in , manner that 
guarantees a secure transfer of the few data for reconstruction the 
usability. Therefore, these operational instructions could also be 
stored on a movable, secure but temporary electronic memory or an 
intermediate memory with an electronic unit that provides a secure 
dat a exchange only to the authorized user and destination. Thrs 
hardware is state of the art and is realized in smart cards or rn 
dongles. The exchange procedures could also be realized by 
conventional, state of the art cryptological protocols. This smart 
card that might have to - due to security reasons - contarn some 
identification or authentif ication data, could be loaded wrth 
operational instructions and authorized for a definite purpose at some 
other distant or separated location, e.g. library or bookstore. 

Another transfer of the operational instructions could be 
realized by a state of the art periodic or non-periodic broadcast of 

These data have to be identified 
these individual instruction data. These 

only by an end user program that got a registered access right to the 
requested electronic document by the above releasing server. The 
met hod and software of how to extract data fro. this public broadcast 

^ v. n„hiir as well. The extraction algorithm only 
data stream could be public as wen. 

needs an secret session Key or secret operational instructions to 
identify or to select only his requested instructional data. In order 
to be temporary off-line from a networK in this manner, additional 
hardware has to listen for such broadcast messages. 
0 All transfer or transmission methods need to have in common that 

th ey transfer or deliver data from an external source to the local 

o maT mer All these transfer technologies have to 
source in a secure manner, ah 

^ at- least one temporary online contact to a 
provide either an online or at least one t v 

releasing server during a status that is usually offline. Therefore 
35 even a smart card needs an online contact at least once in order to be 
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prepared for offering the necessary data so that a final user is able 
to operate with the requested, usable electronic document. 

is necessary for security and authentication 
Network access is necessary 
reasons It « -art card or . dongle is used to store operational 

I ons access to these data must be provided by a separate 
5 instructions, access 

access control procedure only. This access control procedur can be 
circumvented by sharing the smart card. if no J^™ 
authentication is included. Because all information about stru c ur 
elements is stored on a releasing or copyright server, a networ* 

■ ■ .l«.vs necessary in order to transfer the instructions 
10 connection is always necessaiy 

£o r reconstructing the structural elements directly 
Intermediate, access-restricted, movable memory, as for example 

smart card. incorporated into the 

A second connection is optional. It must De 
« communication process if the publisher of a document wants to 
guarantee that use of the document will be obtained only under certain 
Instances, e.g.. by users who have paid the royalties or on 

; a nv rpaistered for this purpose, 
computers specially regisLei^u 
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CLAIMS 



a 

network 



, apparatus for protecting electronically published documents wrth 

.r system (14) «" b * "" neCted l0CSllV " y 

a !ocal computer system < partlcularly a data transmission 

data transmission medrum (10), particula 

twor*. to an eternal data source ,12, and which rs adapted o 
up execute, and/or output published documents, characterised in 

up, ex«ou , dAta storage means (18) 

t n; r:: 1 1:17:: t:: - i— y 

t he local computer system .14) ^ther " ' h " 

and processing additional protected data provided by the 
receiving and process g transmi ssion means ,10,, 

"Tii r: rig m^ar — - — - * 

as well as a nnici y additional 

i -,i Mat-a storaqe means (10) W1U1 

"71;^:; at - uy -u.^ — 
:: m r a — — - 

k rhe user and wherein the local computer system 
perception by the us. ^ ^ ^ ^ q£ 

comprises output means (20) selected 

comp electr0 nically published, adapted to call up, 

the document to be me aningful 
execute and/or output the document m the 
and/or suitable for sensory perception by the user. 

, fnrt h in claim 1 characterised in that the data 
2 — ; " 8) Se /Ipt d to store an electronically published 
storage means ,18, - J J pirticulat a non-linear manner, 

document in a non-reconstructed, in p 

wherein the non-reconstructed document can be converted into a 
constructed linear document which is usable by the user 

,r>c\ utilising the additional protected 
action of the linking means (26), utilising 



data . 



, , as set forth in claim 2, characterized in that the 
3 Apparatus as sen ruj.^ 

i, adapted such that structural elements of an 
linking means is adapted operat ional 

r%nhi Uhed document are iuwwu. 
electronically publisnea 
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instructions derived from the additional protected data in order to 

t-r. t-hP reconstructed document, 
effect the conversion to the reconsu 

, apparatus as set forth in one of claims X to 3 characterised in 
hat Z local data stora g e means is a magnetic and/or optical .ass 

. . „„ h, u of the electronically published 

store (18) in which volume data of 

document are stored in a plurality of storage locations which are not 
interred, and wherein the additional protected data denote an 
interconnection and/or , sequence of the storage locations. 

5 apparatus as set forth in one of claims 1 to 3 characterised in 
that the local data storage means is a magnetic and/or optica mass 
tore US,, wherein volume data of the electronically published 
document which is stored therein have data gaps and the data gaps can 
b. directly closed by the additional protected data, or wherein the 
dditional protected data include storage location identifications 
h h refer to separate storage locations of the local data stora 

the data gaps. 

6 . apparatus as set forth in one of claims 1 through , «-»««^ 
by an encoding means which is embodied by means of a 
o the external data source and a second module „„ of 
computer system and which is adapted for the protected ™» » 
the additional protected data from the external data source ,12, 
the local computer system (14). 

7. apparatus as set forth in one of daims 1 through 6 ch«.ct.ri«- 

by ,„ identification and/or billing module ,36, which is adapted t 
identify a user of the local computer system and to acquire 
corresponding use and/or billing data. 
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, - Apparatus as set forth in one of claims 1 through 7 characterised 
0y a control module (28, which is provided in the local computer 
system .14, and which is provided for dialogue and operational control 
of the data exchange with the external data source ,12, and/or an 
operating unit ,22, which is provided to detect user commands and to 

influence operate of the local computer system as a reaction to the 

user commands. 

9. A method of protected representation of electronically published 
documents, characterised by the following steps: 

- calling up document data from a local data storage means (18) 

whi ch is connected to a local computer system (14) and which stores 

the document data in a form which is not usable by a user, 

_ receiving (S12, additional protected data of an external data 

source connected to the local computer system (14) by way of a data 

transmission medium (10), particularly a data transmission networ, 

_ linking (514) the additional protected data to a content of the 

local data storage means (18) to produce document data in a form 

usable, meaningful and/or suitable for sensory perception by the user, 

calling up, executing and/or outputting the document data in said 
form, usable, meaningful and/or suitable for sensory perception by the 
user , by means of output means selected in accordance . with the type of 
■the document to be published electronically. 

10. A method as set forth in claim 9 wherein the step of linking 
comprises the following steps: 

- deriving operational instructions from said additional protected 

modifying structural elements of an electronically published 
document with the operational instructions, thereby providing a re- 
constructed document in the form usable, meaningful and/or surtable 
for sensory perception by the user. 
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U - A method as set forth in- claim 9 or 10 characterised in that 
storage of local document data is effected in a sequence which, 
without linking to the additional protected data, does not permit 
representation of the document data in the form usable, meaningful 
and/or suitable for sensory perception. 

12 a method as set forth in claims 9 or 10 characterised in that 
storage of the local document data with gaps occurs in such a way that 
the gaps are closed only by linking to the additional data. 

13 . A method as set forth in one of claims 9 through 12 characterised 

by the following steps: 

- identifying the user in the external data source (12), and 

- exchanging user and/or billing data (S10) in respect of the user 
as a reaction to identification prior to reception of the additional 

protected data. 

14 A method a, set forth in one of claims 9 through 13 characterised 
in that the step of receiving the additional protected data includes 

the following steps: 

- encoding of the additional protected data by the data source 

- 2) ' transmitting the encoded additional protected data by way of the 
data transmission network (10), and 

- decoding the encoded additional protected data by the local 
computer system (14) . 

15 . A method as set forth in claim 14 characterised by the following 
step : 

- agreeing a code (Sll) between the external data source (12) and 
the local computer system (14) prior to the encoding step. 
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IS - A method as set forth in one of claims 9 through 15 characterised 
b y' successively calling up and representing a plurality of document 
units , -herein a set of the additional protected data is received for 

each of the document units. 

17 a method as set forth in one of claims 9 through 16 characterised 
in that the reception of the additional protected data is dependent on 
a single and/or temporary access authorisation established by 
agreement between the local computer system (14) and the external data 
source (12) . 

18 A method as set forth in one of claims 9 through 17 characterised 
in' that the data which are usable by the user include a text, produced 
in a language, and having a plurality of words, the words are provided 
in an arrangement which forms a meaning for the user, and at least one 
of the words is arranged by the effect of the additional data at a 
position in the text which permits clear identification and 
association of the text with the user. 
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Description 

[0001] The present invention concerns an apparatus 
for protecting electronically published documents as set 
forth in the classifying portion of claim 1 and a method 
as set forth in the classifying portion of claim 9. 
[0002] For defining the terms used in the present ap- 
plication, the following shall apply: 
[0003] Data are representations of information of any 
sort. The classification of data occurs in data types. In- 
formation can only be useful on a computer when it has 
been assigned to a data type in accordance with funda- 
mental conventions and physically stored. Information 
can be transformed into an equivalent data type or a 
physically stored form without a loss of content. 
[0004] A text is constituted of the smallest units of 
texts, characters or symbols, such as, e.g., a number or 
a Chinese character. Each of these characters possess- 
es a digital representation, in accordance with a pre-giv- 
en convention or an agreed-on standard. A character is 
represented by a sequence of e.g. 7-, 8- or 1 6-bit chains 
of zeros and ones. There must be a set of characters, 
thus a precise association of text characters with their 
binary representation, and a font, by means of which the 
individual elements of this character set forms a surface 
of pixels. The bit sequence can be understood as an 
electronic text before or after the replacement by the 
character set. Agreement with the original text is also 
given when a computer program first transf orms passive 
data into an output, so that it can be represented on an 
output apparatus. In addition, a text can also be repre- 
sented on the output unit by active data that contains 
executable commands, operating instructions or in- 
structional data. These active data can contain direct or 
indirect processor instructions. 

[0005] The text is represented in and on the output 
unit, in and on a surface. The text consists of a content, 
thus a textually fixed verbal utterance, and a layout. In 
this layout there is a representation of font and type size, 
the positioning of individual words, characters, symbols 
or pictures, the type of chapter or page numbering, the 
kind of line or a length thereof, the line separation, page 
size, margin width, color or all other attributes which an 
observer can optically distinguish in represented char- 
acters. 

[0006] The text can also contain dialogue boxes or in- 
put fields which request the user to enter data. 
[0007] A pictu re means a representation of something 
or someone on a surface. Electronic or digitalized pic- 
tures are thereby stored in a data format in which they 
can be transformed as active or passive data by a com- 
puter program into a static, flat representation on an out- 
put unit. Defined in this way, texts can also be stored as 
pictures. Conversely, pictures can also be viewed as 
texts. A picture can be a representation of a real object. 
But it can also be a drawing generated by a person or 
computer of a real or non-real object. A picture can be 
based on pixels, bitmaps vectors or fractals. Some data 



formats employ compression methods. New methods of 
coding make use of decomposition in wavelets or frac- 
tals. 

[0008] Pictures whose content changes across time 
5 are called videos or films. Videos are stored on the com- 
puter in data formats which make it possible for their ac- 
tive or passive data to be issued with the help of a com- 
puter program on an electronic output unit. Their issued 
contents are again represented in a sequential progres- 
io sion of single pictures. 

[0009] A temporally changing drawing or a process 
which gives the illusion of movement or of life in a draw- 
ing, model or (non-dynamic) object is called animation. 
With animation there is a change of position by the ob- 
'5 jects to be viewed or a change in the position of the view- 
er. The objects viewed in an animation are not real in 
the represented manner, but only generated by people 
and their tools. 

[001 0] Interactive films are video media or animations 
20 whose represented action, observation point and angle 
of view or represented object can be changed by user 
inputs and external commands. A request for input at a 
meaningful point in time is in this sense likewise an out- 
put in the frame of an interactive medium. 
25 [0011] A database is a structured collection of data 
which are stored on digital data carriers or electronic da- 
ta processing units forthe purpose of later digital or elec- 
tronic reading. 

[0012] Texts, pictures or films are visually compre- 
30 hended. They are thereby part of human visual (optical) 
comprehension. 

[0013] Audiomedia include all media which effect an 
acoustically audible output. Audiovisual media are in 
this connection all media that permit simultaneous au- 

35 dible or visible outputs. 

[0014] Texts, videos or animations are in this sense 
audiovisual. A document in which more than one data 
convention is used or more than one visual or auditory 
representational medium is used are called multimedia. 

40 [0015] Passive computer programs are programs 
whose code instructions are not directly processed by 
the interfaces of the hardware inside a computer. In con- 
trast to active computer programs, which contain a di- 
rect machine code for a processor, passive programs 

45 have effects only up to the lowest system interfaces of 
an operating system and have the attribute that the code 
instructions are expressed in a language which can in 
principle be changed at any time, especially without 
changing the hardware. 

50 [0016] Fonts are passive or active data or passive or 
active computer programs which are responsible forthe 
visual representation of characters and symbols. They 
contain all the data and operating instructions for their 
size, appearance or other attributes. Fonts are used for 

55 the preparation or creation in an output represented by 
pixels on the output unit. 

[001 7] Control statements or control programs for ma- 
chines or robots are also active or passive computer 
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programs which deliver an output in the form of a se- 
quential string of active mechanical, electrical, acoustic, 
visual, or chemical operational steps or passive senso- . 
rial input steps. An output can also have the form of a 
query or input which interact with the end user at a log- 5 
ical point in time. 

[001 8] In this sense, texts, pictures, databases, audio 
media, videos, animations, interactive films, control pro- 
grams, fonts or passive or active computer programs, 
and video games, are all examples of electronic docu- 
ments which have been stored in a digital or discrete 
electronic representation, and which can be published 
electronically. 

[0019] A digital representation has the attribute that 
the individual bit data can be presented serially, thus in 
a spatially, temporally or logically sequentially connect- 
ed manner. These data can be received or transferred 
in a temporally sequential manner, that is one after the 
other, without the inner connection being lost which is 
given only by the sequence of bits. 
[0020] This bit information is then organized into larg- 
er contexts, coherences, connections or summaries as 
characters, fonts, sentences, pages, texts, pictures, 
sounds, audiomedia, videos, animations, databases, 
control programs, active or passive programs, and so 
forth, and thus form data units. The summarized data or 
data units need not necessarily be physically connected 
in the storage medium. It suffices if the connection is 
realized through a separate addressing. It is then obvi- 
ous through a knowledge of the data format employed 
which element is respectively the preceding or the fol- 
lowing. Corresponding to the data format, the bounda- 
ries are set by the elements which have either no pred- 
ecessor or no successor. 

[0021 ] Data units can form a hierarchy in regard to the 
relations "is contained in" and "is a including set of". The 
hierarchies thus consist of a structure of data units, sub- 
systems and substeps in the form of a graduation in re- 
gard to responsibility, function, functionality or sequence 
of the individual substeps which is in addition given by 
an order of precedence or rule of priority. 
[0022] For example, in this sense the following hier- 
archical order is naturally and functionally pregiven: 
character, word, sentence, paragraph, page, chapter, 
text. Elements on the same hierarchical level and of the 
same hierarchical sort thereby form a hierarchical class. 
A data unit is thereby an element of a hierarchical class. 
[0023] Within these larger summaries the individual 
data units of a hierarchical class can be linearly ar- 
ranged. The data units can, however, also be hierarchi- 
cally arranged and thus form more comprehensive hier- 
archical classes. References to other data units can be 
contained within data units. These references can be 
understood as jump instructions and can be followed as 
a command to jump to the predecessor or successor in 
the hierarchical class. By means of these jump instruc- 
tions non-linear electronic documents can be created, 
e.g., ones which can then be visualized in the form of a 



network or can also be designated as a hypertext. 
[0024] A structure refers to the arrangement or rela- 
tionships of the parts of a whole to one another or their 
inner arrangement, together with the inherent relational 
network or its attributes. Further, a structure for a rela- 
tional network can be made up of rules in which the el- 
ements fit together in a complex totality. The sum of all 
connections of the data units to each other or within the 
hierarchy. 

[0025] The structural elements are then the jump in- 
structions which represent the existing arrangement in- 
structions in the form of bit information, or implicitly they 
form a connected arrangement through the linear se- 
quence, without further bit information, whereby the in- 
dividual data elements are linearly connected and could 
generate the complete, unaltered electronic document. 
The structural elements can, however, also be address- 
ing through name equivalency of objects or references 
within a group of elements. The structural elements 
which are used in the invention in a preferred manner 
are those which are taken from an abstract view, i.e., 
from the syntax, the management of the structuring or 
the visible addressing of the elements, that exist within 
a group of elements. 

[0026] Linearity is a sequence of data units whose ar- 
rangement is one-dimensionally linear, whereby the in- 
dividual units can respectively have only one neighbor 
in front and behind, respectively left and right. 
[0027] A linear chain can, however, also be singly 
linked, so that it is only possible to infer to the preceding 
or to the following element. 

[0028] A structure is non-linear if it possesses in a hi- 
erarchy class less than two or more than two neighbor- 
ing elements bound through explicitly or implicitly as- 
sumed jump instructions without the beginning or end 
point of an electronic document playing a role in this con- 
sideration. In addition, a structure is non-linear if the lin- 
ear arrangement pre-given by the unaltered electronic 
document has been changed. This change can be made 
on a hierarchical level through exchange or replacement 
of data units by references. These references could 
form a singly linked connection to one or more identical 
or almost identical data units at different position. 
[0029] The connection between two data units forms 
the linear structural element. The expansion of this con- 
nection to several data units forms a sequential, serial 
or linear sequence. In this case the overail document is 
definitely created from its individual components, and it 
can in any case be authentically identified with the orig- 
inal unaltered document. 

[0030] Without this linear structural element - forming 
the sequence - the thus separated data units could be 
regarded as equally entitled to be arranged consecu- 
tively and in addition arbitrarily arranged. The arbitrary 
and possibly pseudo-randomly determined deletion or 
changing of structural elements can also be referred to 
as a mixing or scrambling process or a de-addressing 
process, i.e., the intended undoing of the addressing. 
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The deletion of a structure element has to imply that the 
original order, addressing or naming is changed, but 
these structure elements, with their position or their as- 
signments, are extracted or stored to an external djevice, 
file or database. The original state can be reconstructed, 5 
i.e., the document can be returned to the original state 
or transformed into an intended new state, if these ad- 
ditional information are provided as operating instruc- 
tions. 

[0031] The structural elements, especially the linear '0 
ones, in part represent not explicitly articulated informa- 
tion without which meaningful use is impossible. Infor- 
mation which leads to the reconstruction of usability, i. 
e., which recreates the structural elements, permits the 
electronic or human readability or usability of a so-pre- '5 
pared electronic document. 

[0032] Local alternation within a statement is possibly 
not recognizable after the deletion or changing of a 
structural element, but it provides, in connection with the 
new context, a meaningless, unusable, contradictory, 2° 
unreliable or false meaning context. 
[0033] In contrast to a restoration in which the original 
state is not recreated, and therefore the original state is 
no longer recognizable but rather in the given case can 
only be inferred through additional information, a recon- 25 
struction is indistinguishable from the original state of 
the document. A restoration of a document can, howev- 
er, be made in a logical manner so that later the ar- 
ranged data can be provided with the context of crea- 
tion, temporally, spatially, logically or with reference to 30 
persons and thereby make possible inferences to the 
original state. 

[0034] We can regard as structural elements of texts, 
besides the implicit linearity of words, sentences and 
pages, also the explicitly present chapter numbering, 35 
page numbering, inner page references, references 
from the table of contents to the text, page references 
from the indices, references from the text to the bibliog- 
raphy, and so forth. Labels, references or hyperlinks in 
non-linear hypertexts can also be regarded as structural *o 
elements. Essential conjunction like "and", "or" or short 
phrases that already inform the reader about most of the 
text like a headline could be removed separately by pro- 
viding these words or phrases from external source in- 
side the operational instruction as significance creating 
or causing structural elements. 

[0035] Structural elements in databases are given by 
database indices or the addressing with the primary key 
or foreign key or by other organizational data for struc- 
turing and managing a database. With a hard disk, dis- 50 
kette or CD-ROM, e.g., the structure element are includ- 
ed in the FAT or in the Inode table. 
[0036] With passive and active programs the structur- 
al elements are the linkages which arise in the variables 
and function through name equivalency, if they refer to 55 
the same source or the same object. The agreement of 
namesJn an electronic document thereby also repre- 
sents a not further-analyzed structural element. The al- 
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teration of a program can also be performed within the 
obligatory grammatical rules of a programming or ma- 
chine language using instructional rules so that check- 
ing the syntax with a compiler does not reveal errors, 
and that error reports during the execution time of the 
program could not be used to locate the position of the 
change of the structural elements. 
[0037] Metadata on electronic documents that help 
programs on a computer to understand, to extract and 
to use the semantic or the syntax of statements, pictures 
or programs could contain several structure elements 
for organization and management by itself. But Metada- 
ta offer structure elements also, that are providing and 
showing relations in between particular shares of the 
electronic document that belongs to these data. 
[0038] With numbers the structural elements are the 
prefix, postfix operators, the right assignment to the cor- 
rect order of magnitude or the right unit of measurement. 
Their alteration cannot be locally determined. 
[0039] The deletion or changing of a structural ele- 
ment has the consequence that all the data units con- 
nected with it lead to meaningless, contradictory, use- 
less or false statements or sequence processes. 
[0040] The increasing spread of electronic data net- 
works and independent data carriers (for example 
CD-ROMs), the steadily enlarging user circle, and the 
improvement in transmission and access technology for 
on-line services are also yielding new possible ways of 
offering and publishing electronic documents (or media) 
by way of such data networks, for example the Internet; 
such products, besides texts and images, also include 
audio or video media etc.. In addition, such electronic 
marketing channels, e.g., the Internet, open up interest- 
ing business opportunities with enormous advantages 
in the logistics of marketing and clear cost advantages 
in the publication process. 

[0041] With the creation of the technological frame- 
work conditions for electronic publication of that kind, 
there arises the technical requirement of protecting such 
media from unauthorised access or from illegal copying 
so that the copyright of the supplier or provider can be 
effectively protected: due to the digital character of the 
electronically published information copying (even un- 
authorised) could occur without a loss of quality; there- 
fore the question of protecting such electronic publica- 
tions is an existential and fundamental key question for 
the public release of (digital) video, audio and print me- 
dia etc. in electronic form. 

[0042] EP 0 665 486 A2 discloses a method with 
which electronically published media can be protected 
in order to achieve the aim outlined above. 
[0043] That method from the state of the art involves 
a substantially cryptographic method in which an (elec- 
tronic) document is transmitted by way of a network, 
which document is then to be decoded on the local com- 
puter. In that respect the local user decoding option is 
based on authentication, which occurs by way of the net- 
work, of the user and a corresponding individual coding. 
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In addition the document is electronically so clearly iden- 
tified that identification of an illegal copy can be traced 
back to the original user - therefore at least legal asser- 
tion of the claims involved, after illegal access or an un- 
authorised copy has occurred, is possible. 
[0044] However that method in accordance with the 
state of the art suffers from a number of disadvantages: 
thus the transmission and computing expenditure alone 
is already considerable for the reason that a specific ver- 
sion of the complete document must be transmitted by 
way of the network for each identified and authenticated 
user; therefore, besides the encoding expenditure for 
the entire document, the procedure involves transpor- 
tation of a volume of data which is not inconsiderable, 
precisely in the case of multi-media documents. It is ad- 
mittedly to be assumed that in future, by virtue of pow- 
erful computing installations, this method will also oper- 
ate for a large number of (possibly simultaneously) ac- 
cessing users, with an acceptable access time; however 
there is then still the problem that the network capacities 
are possibly not always sufficient for transmission of the 
amount of data involved in the complete document, pre- 
cisely in terms of real-time operation. 
[0045] US 5, 1 03,476 discloses an apparatus accord- 
ing to the preamble of claim 1 . This document also de- 
scribes a method of distributing software in a secure 
manner by first distributing inactive or unusable portions 
of the programs and, additionally, transmitting so-called 
overlay files to be run together with the inactive software 
such that a final main program to be run on a local com- 
puter system can be achieved. The overlay may be com- 
municated by means of a data transmission network up- 
on completion of a registration and licensing procedure. 
[0046] EP A1 0 601 500 A1 as well as WO95/08231 
additionally disclose apparatus for protecting electroni- 
cally published documents disclosing several of the fea- 
tures of the preamble of claim 1 . All of these documents 
include security systems or security mechanisms to 
control access to electronically published documents, 
clearly based on completed billing or licensing transac- 
tions. 

[0047] However, neither of these documents known 
from the prior art permits further security or authentica- 
tion during later sessions of retrieving and representing 
the respective electronically published document, once 
the initial licensing transaction has been completed. 
Therefore, particularly with regard to electronic docu- 
ments that require tight access control, or that consist 
of specific document structures, such prior art technol- 
ogy appears deficient. 

[0048] Therefore, the object of the present invention 
is to provide an apparatus according to the preamble of 
claim 1 that improves the control and flexibility of the 
document distribution process. 

[0049] The invention further seeks to provide that the 
documents to be published in accordance with the in- 
vention are potentially made available to an unlimited 
number of users (without respective individual complete 



encodings having to be effected for a respective user • 
which is expensive in terms of time and computing ca- 
pacity - as in the above-mentioned state of the art). 
[0050] That object is attained by the apparatus set 

5 forth in claim 1 and the method set forth in claim 8. 
[0051] Advantageously in that respect the local stor- 
age of the electronically published document, although 
in a manner which is unusable for the user without the 
additional external data permits the non-encoded iden- 

10 tical distribution of a theoretically unlimited number of 
identical documents without intervention in the rights of 
the supplier or provider being possible by a copying ac- 
tion or the like. On the other hand, however, an inter- 
change of the additional data takes place by way of the 

15 data transmission medium or the data network, with 
which data then the locally stored document data can 
be put into a usable and meaningful form for the user by 
the linking means. 

[0052] In this respect, in accordance with the inven- 
20 tion, the expression "data transmission medium" means 
any electronic device for transmitting data, and "data 
transmission network" means any electronic network 
with which data can be exchanged or transmitted be- 
tween computers, beyond the local area. Transfer me- 
25 dia could be wired or non-wired phone lines, any cable 
capable for information transfer, any kind of broadcast 
like terrestrial or by satellite, or any kind of memory with 
input, output interfaces and which is able to perform data 
processing operation. 
30 [0053] As in particular it is also possible that transmis- 
sion of the data for decoding the documents is effected 
by way of a terrestrial television transmitter or by way of 
satellite, in which case for example the inquiries also 
take place by way of a data line, the expression "data 
35 transmission network" is also to be interpreted as any 
electronic transmission medium with which - beyond the 
local area - the data can be exchanged between com- 
puters or data can be requested by way of a transmis- 
sion medium and received separately from said medi- 
co um. 

[0054] For that reason it is possible in accordance 
with the invention for the local data storage means to be 
interpreted as a television transmitter or other wide- 
band transmission medium, by way of which the same 

45 (volume) data are always periodically transmitted while 
a second slower channel individually supplies the addi- 
tional data (a possibility for example is also an arrange- 
ment similarly to the principle of the Near-Video-On-De- 
mand, as is broadcast for example by way of satellite). 

so Accordingly the local data storage means according to 
the invention may therefore also have a means which is 
designed for the reception of periodically transmitted da- 
ta by way of a wide-band channel. 
[0055] In general, units which can be in the direct 

55 physical access of the user are meant as -local". 

[0056] Generally, also a procedure or the content of 
a message may be called secure if the technology or 
personnel needed to illegally obtain the message effec- 
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tively cost more time, money or energy than the maximal 
profit that anyone expects to gain by cracking the secu- 
rity system. 

[0057] Security could be guaranteed by encryption or 
by hiding or disguising the data within a large quantity 
of other data or by assigning data a secret meaning or 
a secret allocation to certain functions agreed on in a 
secret communication before or after the mutated oper- 
ational instructions are given to the final user. 
[0058] Advantageous developments of the invention 
are set forth in the appendant claims. 
[0059] Thus in a particularly preferred form the elec- 
tronically published documents are stored in the local 
data storage means in a non-linear form, wherein in con- 
nection with the present invention the term "linear" is to 
be interpreted as follows (in addition to the definition giv- 
en in the introduction of the present application): linear 
media, that is to say media which can be interpreted as 
a linear chain of pages, images or other information car- 
riers, comprise a number of contents or content carriers 
(in the case of printed works therefore for example pag- 
es) which are connected together by way of a structure 
(therefore page numbers or the physical arrangement 
in a printed book) and which are put into a meaningful 
sequence. Therefore, by means of the structure ele- 
ments, even a document comprising a plurality of non- 
linear content carriers which are stored in any sequence 
and which therefore cannot be used as an overall doc- 
ument for a user can be put into the form of a linear, 
usable structure. 

[0060] In that respect, therefore, the additional data 
provide a directed or bi-directional connection (link) be- 
tween two separate parts of one or more documents. 
Linearity of a document therefore denotes the simply 
scaled sequence or arrangement of the individual infor- 
mation carriers while non-linearity in the present sense 
is the deviation from a linear arrangement (at least of 
parts) of the medium. 

[0061] A particularly suitable form of local data stor- 
age means that can be used is a permanent storage 
means, for example in the form of an optically readable 
CD, which can be produced at low cost in large num- 
bers. Then, the individual information carriers of the doc- 
ument could be stored on that CD - in non-linear config- 
uration - in an arrangement which differs from the natu- 
ral document sequence, without the CD additionally 
containing data or items of information about the ar- 
rangement of the information carriers, into the usable 
sequence. On the contrary those additional items of in- 
formation which firstly bring about linearity of the docu- 
ment would be supplied externally by way of the net- 
work. 

[0062] Alternatively, in accordance with the present 
invention it is possible to achieve non-linearity in the lo- 
cal data storage means in such a way that the document 
stored therein has a number of data gaps, without the 
data content of which the document is unusable for the 
user. Data filling up those data gaps can now be brought 



about either as additional data from the external data 
source by way of the network or the gap data can be 
stored locally - although separately from the remaining 
document - and as external data, once again only linking 
5 or index data would be provided for linking the gaps and 
the associated gap data. 

[0063] In accordance with a preferred development of 
the invention which in this respect is to be considered 
as the best mode of carrying the invention into effect the 
10 apparatus according to the invention additionally has an 
encoding means with which the additional data that are 
transmitted by way of the data.network can be encoded 
in order on the local side further to enhance the security 
of usable access to the documents: an interchange of 
15 the additional data - that is to say for example the se- 
quence or gap data - , which interchange is protected 
from third-party access, preferably occurs in the mode 
of a code agreement, which forms the basis for the en- 
coding procedure, between the external data source 
20 and the local computer system, and it is only after local 
decoding of those additional data that they can be proc- 
essed by the linking means to afford usable documents. 
[0064] In a further preferred embodiment there is pro- 
vided an identification or a billing-module with which 
25 items of information of the user can be ascertained and 
subjected to further processing, that is to say for exam- 
ple for the purposes of charge ascertainment and billing. 
(As a distinction in relation to the state of the art referred 
to in the opening part of the specification and concerning 
30 the general kind of system involved, identification of the 
external user by the data source is only necessary for 
that purpose). Between the host and the user there can 
be defined an electronic currency in the form of random 
character series which can be used only once ("one- 
35 time pads") which permits the user to pass on his rights 
in regard to reading the documents. 
[0065] Also, in accordance with the invention, a con- 
trol module provides for the friction-less data exchange 
with the external data source. The invention can there- 
to fore ensure that unauthorised copying and dissemina- 
tion of the documents is impossible; at the same time 
however it is possible at the local user end not only to 
tolerate but possibly even promote any copying or trans- 
mission of the locally stored document data in order 
45 thereby to attain the largest possible potential user circle 
for the electronically published data. At the same time 
there is the advantageous effect that, in accordance with 
the invention, the volume of data to be transmitted by 
way of the network from the external data source is min- 
50 imised and is limited only to the additional data accord- 
ing to the invention. In addition further optimisation in 
terms of data transmission from the point of view of 
amount and time can be achieved by compression of 
the external additional data (or also the locally stored 
55 document data). 

[0066] In data formats, layers are used to make struc- 
tures and changes more clear in the different levels of 
abstractions. These layers could include information 
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about the position of important data or meta information 
about the format used, compression parameter or other 
description on the structural elements used. Changing 
the order of elements on a certain layer, with respect to 
the grammar rules that must be applied on this layer, 
implies that there will be no algorithm of reconstruction 
for the original sequence. 

[0067] Changes in the sequence or order with respect 
to the grammar rules of a given layer, data format, formal 
language or human language implies that there is no 
detectable error in these statements. Therefore there 
are no criteria, to be found by observing the changed 
statement, that can assist in determining which of the 
possible combination of the smallest entity in the layer, 
respecting the grammar rules, is the correct and original 
one. 

[0068] The grammar is given by rules that regulate the 
syntax in which the use of characters within a language 
is complete, consistent and contained. 
[0069] Therefore, in accordance with the invention, in 
a development thereof, it is possible, using the redun- 
dancy in speech, to insert or displace words at different 
positions within a sentence without the content or the 
meaning of the sentence being affected thereby. That 
advantageously provides that individual identification of 
the source of illegal copies can be achieved by suitable 
individualised positioning of individual words. More spe- 
cifically, in particular the separate transmission of the 
additional data (that is to say for example the sequence 
data) can be utilised to introduce a clear, subsequently 
identifiable word transposition or word combination 
which has no influence in terms of content. 
[0070] In order to identify the final user of an electronic 
document, the restoration of a document could be done 
within the grammatical rules of underlying data struc- 
ture. Because not all changes or deletions of structural 
elements render a document useless, rules for hierar- 
chical classes, layer or data structure could be derived 
that do not guarantee a change in the meaning or con- 
text of a statement. On the other side, rules exist that 
certainly change the meaning of a document. For exam- 
ple, a change in the type of numbering (Arabic numbers, 
Roman numerals, alphabetical, etc.) in an ordered list 
does not change the meaning of a text. Furthermore, 
the order of an unordered list of variables which are as- 
signed to independent values usually has no influence 
on the operation of computer programs. On the other 
hand, rules that change or delete structural elements af- 
ter a punctuation mark which are applied to electronic 
texts result in a prepared document that probably has 
no usable content. 

[0071 ] A method to identify the final user is that state- 
ments or paragraphs with the same content, but a bit 
differently prepared could be kept in the public part of 
an electronic document in parallel, so that a combination 
of different statements containing only small differences 
is uniquely prepared, and these clues could be used for 
a subsequent identification of illegal copies. 



[0072] Hierarchical classes are similar to layers.. Op- 
erations on a level could be done by rules that change 
or delete structural elements with respect to the gram- 
matical rules due to the order and sequence inside these 
5 hierarchical classes. These rules transform the order of 
the original data into a new order in the group of accom- 
panying entities that therefore contains no errors in the 
grammar rules used. 

[0073] In pictures the hierarchical classes are lines or 

10 columns, frames or interframes in MPEG coding, ele- 
ments in databases of the same data structure. Assign- 
ing variables to certain values or groups of statements 
in computer programs that could operate without in- 
structional errors in a contained context by a definite in- 

15 put and output are likewise hierarchical classes. 

[0074] In accordance with further preferred develop- 
ments of the invention, the method according to the in- 
vention is carried into effect in that the procedure ac- 
cording to the invention is conducted in platform-inde- 

20 pendent mode (that is to say independently of hardware 
or software system environments used) and additional 
routines for integrity checking are incorporated, with 
which it is possible to ascertain whether the external us- 
er is properly accessing or whether inadmissible at- 

25 tempts at access are being undertaken. 

[0075] In accordance with the invention, therefore, the 
method and the apparatus can be used to provide that 
the user may only apply precisely defined processes to 
the documents - for example printing-out can be permit- 

30 ted, but this can also be excluded by means of a suitable 
device (and possibly external control by way of the net- 
work). In addition, the invention ensures that storage of 
the locally generated, usable document information is 
not possible. 

35 [0076] In addition, in accordance with a development, 
an electronically published document can be provided 
with an (electronic) expiry date in absolute or relative 
form, in which case also the intended aim of the expiry 
date cannot be foiled by manipulative measures at the 

to local computer system as a corresponding item of data 
which is linked to a document is always dependent on 
the external item of data transmitted by way of the net- 
work. Updating operations and the like for the document 
can be effected in a corresponding manner. Generally, 

45 the possibility to provide security according to the inven- 
tion always means any opportunity to update such an 
electronic document. 

[0077] To judge the effectiveness of the protective 
procedure presented here, the following concepts can 

50 be referred to with regard to the present invention. 
[0078] Generally, information is treated as a funda- 
mental entity, like messages which are exchanged be- 
tween source and receiver. The protection of the infor- 
mation results from the question of how large the share 

55 of information is that can be obtained by an active or 
passive auditor or eavesdropper from the coding em- 
ployed. The inadequacy of this description results from 
the circumstance that neither in cryptography nor in the 
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information and coding theory information has a seman- 
tic meaning or context that is addressed to. Within these 
theories there is no semantic level, and thus there is no 
technically or conceptually usable meaning for the con- 
cepts of context, redundancy or logical usability. 
[0079] Information content is, as negative entropy, a 
measure of the unexpected content or surprise in the 
content which a message or information contains. The 
numerical sequence 1-2-3-4 contains, according to in- 
formation theory, the same information content as every 
other combination from 1 to 4. If a combination of inde- 
pendent numbers 1 , 3, 2 f 4 is to be returned to the orig- 
inal form 1-2-3-4, then information about the sequence 
must be given in the form of an operating instruction 
which was not previously explicit in the original numer- 
ical sequence 1 -2-3-4. 

[0080] Given the internal redundancy of language, 
data formats or file formats, very often the next element 
can be predicted with a probability above chance. Thus 
in the German language it can be inferred with high 
probability that an "e" will more probably be followed by 
an V than a "y". Likewise, it can be expected with high 
probability that a grammatical article will more probably 
be followed by a substantive than a verb. Nevertheless, 
these attack variants on a mixed or de-addressed data 
unit indicate that the deletion or changing of a structural 
element will not offer any clues for the reconstruction of 
the sequence. The divisions within sentences would 
thus be disadvantageous. With the deletion or changing 
of a structural element within a word, e.g., with a hyphen, 
one can usually find the precise continuation of a word 
by using a dictionary, and thus the reconstruction of this 
structural element is possible without the use of external 
data. 

[0081] Through the logical arrangement of bit infor- 
mation which, for example, through individual charac- 
ters reveal whole sentences, statements are created. 
This information can then receive a semantic meaning 
in regard to a selected data convention and together 
with its creation or meaning context. This meaning is in 
addition socially determined. The meaning of the indi- 
vidual sentence implies more or is more precise than 
the sum or the intersection of word meanings, and a text 
meaning is correspondingly more than the sum or is 
more precise than the intersection of the sentence 
meanings. 

[0082] By mixing or scrambling entire paragraphs or 
sentences in texts, e.g., by the use of punctuation marks 
or by de-addressing within an electronic document, the 
separation of a semantic statement from its context is 
achieved. 

[0083] To understand a semantic statement A we al- 
ways need a knowledge of its context. The context is, 
however, by definition not part of this semantic state- 
ment A. The context can make a statement appear to 
be meaning-related, reference-related, language-relat- 
ed, world^related or use-related. The context consists of 
the surroundings in which a statement is understanda- 



ble. The statements in a sentence, paragraph, page, 
text, video, program thus always need the context which 
results from the other statements which are connected 
in parallel or sequentially in the immediate or indirect 

5 surroundings. 

[0084] Alone the deletion or changing of the natural 
sequence within a more comprehensive semantic state- 
ment creates a set of independent statements which 
possess no information about their original inner con- 

io nection with neighboring statements. The reason for the 
use of this procedure is the fact that on the semantic 
level the entire statement is more than the sum of and 
is more precise than the intersection of the individual 
statements. 

'5 [0085] A sentence represents a substantively closed 
data unit about whose continuation one can only spec- 
ulate but not even in a probability-oriented manner. An 
application of redundancy or the use of redundancy in 
the independent reconstruction of an electronic text is 

20 in principle not possible on the level of semantics due 
to the non-inferable context. For these fundamental rea- 
sons it is impossible to discover an algorithmic approach 
to recognizing how a sentence, paragraph, video or pro- 
gram has to be completed. Neither on the electronic, 

25 technical level, nor as an instruction to the human mind 
can a reconstruction of an electronic document consist- 
ing of closed substantive data units be carried out, if the 
structural elements are lacking. 

[0086] A clear text attack by use of the complete out- 
30 put and the access to the complete prepared electronic 
document does not necessarily offer all information of 
the original document. The jump addresses in hyper- 
links and the corresponding destination addresses 
could be delivered by the external operational instruc- 
ts tions as well. Furthermore, fake reference or destination 
addresses could be included so that the completeness 
of an illegal reconstruction and its quality could never 
been proven by an attacker. 

[0087] The invention employs especially the linear 
40 structural elements between semantic entities or the de- . 
addressing of frequently appearing names. These struc- 
tural elements must not necessarily be contained in dig- 
itally coded information in the original data, if these 
structural elements are removed from an original, a so- 
45 prepared electronic document can be restored to the 
original state only with the aid of externally introduced 
operating instructions. 

[0088] An electronic document can thereby be viewed 
as a passive or. active program which runs only on a 

50 linking intermediate layer, thus on a linking unit which 
cannot be circumvented and which it is not reasonable 
to circumvent. This linking unit transforms all the code 
instructions contained in this program into code instruc- 
tions of the original document, so that only the thus-aris- 

55 jng data leads as direct electronic instructions or as in- 
structions for the superordinated, higher or lower pro- 
gram interfaces to meaningful results. These instruc- 
tions on the linking unit can be realized within the proc- 
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essor hardware with conventional electronic integrated 
circuit techniques. 

[0089] The linking unit brings volume data and data 
externally obtained e.g. from a network or from a locally 
protected data area, that is temporarily used but by net- 
work updated, together in order to achieve a restoration 
by using them as operating instructions and for the cre- 
ation of the structural elements so that the original struc- 
ture of the electronic document is restored or recon- 
structed and thus can be turned into a later output. 
[0090] Programs, such as for example a text program, 
a viewer for pictures, a video or audio-player, a database 
management system implemented for a database, a vir- 
tual machine on a client computer, in which programs 
can be started from the network or from a locally pro- 
tected, temporarily used and by network updated, data 
area can possess a linkage unit which inserts structural 
elements in prepared volume data by separately added 
operating instructions, in order that afterwards the re- 
constructed electronic documents can be represented 
on an output unit, reasonably, usably, consistently, reli- 
ably and correctly. Furthermore, the protection can be 
realized in such a way that it is not immediately recog- 
nized whether the document is really complete and us- 
able after an illegal reconstruction. 
[0091 ] An advantage to the state of the art technology 
is that an illegal or unauthorized reconstructed electron- 
ic document is different to original published data be- 
cause it contains structure elements that were deleted 
or changed in the original. Because the illegal copy is 
delivered by some unknown or unauthorized source, the 
final user can never be sure that he really got a elec- 
tronic document that is equivalent to the original one 
from an authorized source and that this fake copy really 
offers a meaningful, reasonable, usable, consistent, re- 
liable and correct content as was intended by the origi- 
nal publisher. The separate transfer of the structure el- 
ements by additional instructions from a known source 
that is always carried out on demand, guarantees integ- 
rity and correctness of the delivered or used document. 
If the client software is able to identify the source for 
sure, which can be done by conventional state of the art 
cryptological protocols, then an unauthorized insertion 
like spoofing could be identified by the final user, be- 
cause reconstructed parts of the changed documents 
will lead to some meaningless and unusable output, that 
will easily be recognized by the final user. 
[0092] In the same reliable way a time restriction 
could be included in a document. This feature can also 
be used to include this limitation from the external oper- 
ating instructions. 

[0093] The insertion of a sequence for the reconstruc- 
tion of the context is an important instrument for the 
management of documents. In a subsequent, flexible al- 
teration of this document through an altered or expand- 
ed edition, old sentences or paragraphs can be left out 
or delivered in a new order by means of separately add- 
ed structural elements. By the transmission of the few 



data which have changed between editions a desired 
alteration during output is made possible on the output 
computer by means of a structural element that results 
from a reference to the newly inserted passage. 

5 [0094] Update-management which brings electronic 
documents up to date is thus an additional advantage 
of this invention which goes beyond protecting the doc- 
uments against unauthorized distribution. The repeated 
transmission of data which are already available on the 

io local computer is made superfluous. Even programs 
can be efficiently, flexibly or rapidly brought up to date 
or expanded. 

[0095] A further advantage exists in the possibility of 
making the distribution of operating instructions de- 

'5 pendent on payment. The use of electronic documents 
can be paid for by using a pay per use procedure. Only 
a small amount of data has to be exchanged by some 
sort of money, electronic payment or MicroPayment. 
The correct operational instruction need to provide for 

20 a share of the electronic document a down payment, 
that will be sent by the end user at the client in advance. 
The marketing and sales of information can then be ori- 
ented to the actual use of the electronic document. The 
sale of unused services or an unused information pres- 

25 entation can th us be avoided by a final client. Therefore, 
the data of a prepared electronic document could be 
free, only the data needed to create the usability and 
readability must be paid for. In this sense, this concept 
offers a technology for super distribution. ' 

30 [0096] The release of an electronic document by ex- 
ternal operational instructions can be done by central or 
decentralized servers. 

[0097] Because all usage rights are offered by exter- 
nal server, the final user does not necessarily have prob- 
es lems with a backup. He should only store the internet 
address where he original found the electronic docu- 
ment and his personal notices all other information could 
be stored on a external server and can be delivered via 
network. The management of usage rights could be 
40 done by a releasing server. Therefore, a small sized re- 
covery could be offered by network services. 
[0098] In comparison to some other copyright protec- 
tion methods neither additional hardware will have to be 
used nor given hardware needs to be modified. 
45 [0099] A reduction of quality in the electronic docu- 
ment could be included in its data by replacing the bi- 
directional structure element, given by a double linked 
linear chain, with a singly linked linear chain. 
[0100] In animation, data formats like FLI, FLC, 
so OpenGL, GKS or VRML are used for interactive and 
non-interactive 3D presentations. In VRML objects are 
described by more elementary geometric objects with 
spatial relationships in between and allocations to the 
assigned object of properties like transparency, color, 
55 texture, sound or constraints on motion. Structural ele- 
ments, like relative position or the assignment of a prop- 
erty to the original value, could be altered for reasons 
of security or updates. An unrecognized change in the 
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assigned property could also be used for a restoration, 
in order to identify the person who has misused docu- 
ments, when accompanying data are stored in a releas- 
ing server. 

[0101] Passive computer programs are usually uti- 
lized on multitasking, multithreading or multi-user oper- 
ations systems. These programs are complied to the 
language special to the operating system and not for the 
processor, with its restrictive machine language. The 
statements of these passive computer programs refer 
to functions, which are included and collected in libraries 
and coded in a machine language of the processor. The 
reference of a statement in a passive program to the 
program library is a structural element that could be re- 
moved and could be used for a later reconstruction for 
security or update reasons. 

[01 02] The machine language could also be changed 
with respect to the grammatical rules of the processor 
language. This change could be made by altering the 
data addresses or the order or sequence of grammati- 
cally independent groups of fundamental entities. Only 
with a few operational instructions, delivered by external 
sources, is a linking unit able to reconstruct the usability 
of a machine code. These active computer programs 
could be used, e.g., on special purpose hardware or on 
computers intended for non-general purposes. 
[01 03] Further advantages, features and details of the 
invention will be apparent from the following description 
of embodiments with reference to the drawings in which: 

Figure 1 is a diagrammatic operating circuit diagram 
of the apparatus according to the invention 
for protecting electronically published doc- 
uments in accordance with a first preferred 
embodiment with additionally illustrated 
possible developments, 

Figure 2 shows a flow chart of the method according 
to the invention for protecting electronically 
published documents in accordance with a 
preferred embodiment, 

Figure 3 shows a flow chart of an updating and test 
method which is carried out in the context 
of the method shown in Figure 2, and 

Figure 4 is a diagrammatic representation of an elec- 
tronically published document in the pro- 
tected non-linear state (a) and in the state 
(b) of being treated in accordance with the 
invention and linearised by the addition of 
linking data. 

[0104] An electronic network 10 which can be any pri- 
vate or public network for connecting a plurality of elec- 
tronic data processing installations for the purposes of 
data exchange between them, and which in the present 
embodiment is the publicly accessible Internet, forms a 
connection between an external host system, delimited 
by the line 12 in Figure 1, and a system comprising a 
plurality of local computers, delimited by the right-hand 



line 14. 

[0105] While the host system 12 is operated by the 
supplier and distributor of user data which are to be sup- 
plied electronically by way of the network 10 - in the il- 
5 lustrated example, being graphic data - the local com- 
puter is provided for calling up and representing the user 
data supplied by the operator of the host system 12, at 
the location at which the local computer 14 is disposed. 
For that purpose the local computer 1 4 has a processing 
10 unit 16 which is bordered by the broken line and which 
is connected on the one hand to a document store 1 8 
and on the other hand to an output unit 20 and an input 
unit 22 and which co-operates with those peripheral de- 
vices. The processing unit 16 is also adapted to co-op- 
'5 erate with the network 10. 

[01 06] The document store 1 8 - so-to-speak the local 
document delivery unit - is designed in the present em- 
bodiment in the form of a local mass storage device 
which is directly connected to the processing unit and 
20 which already contains constituents of the document to 
be electronically published by way of the network. The 
output unit 20 forms the connection between the local 
computer 14 and the user and is selected in depend- 
ence on the document to be published: in the present 
25 case of publication of electronic drawings and graphics, 
the output unit 20 would substantially comprise a mon- 
itor which is suitable for the representation of such 
graphics, with associated data processing, while in oth- 
er situations of use - for example involving the transmis- 
30 sion of texts or additional sound as in the case of audi- 
ovisual electronic media - an acoustic output unit, a 
printer or the like may additionally or alternatively be 
connected. The input unit 22 is for example in the form 
of a keyboard or mouse and serves to the user for pro- 
35 cedural control or for the input of commands for calling 
up the documents which are electronically published in 
accordance with the invention. 

[0107] As a component the central processing unit 16 
has a code unit 24 with associated code store 25, a doc- 
40 ument structure or construction module 26, a dialogue 
control module 28 and a clock 30. The Figure does not 
show a communication module which is provided for co- 
operation with the network 10. 

[01 08] In comparison, provided in the host system 1 2 
^5 is a code server module 32, a copyright server module 
34, a billing server module 36 and - optionally and in 
accordance with a preferred development - a document 
or update server module 38. 

[0109] The function and mode of operation of those 
50 modules are described hereinafter, wherein in the 
present embodiment the functions of those modules are ■ 
preferably effected by suitably programmed software in 
the host system 1 2 and in the local computer 1 4 respec- 
tively; however, as will be readily clear to the man skilled 
55 in the art, those modules could also each be in the form 
of discrete hardware modules with conventional elec- 
tronic circuitry technology which is wired in the specified 
manner in principle and moreover in a manner with 
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which the average man skilled in the relevant art is fa- 
miliar. The term "server" refers to the arrangement of 
the respective module in the host system. 
[0110] The purpose and function of the code unit 24 
(also meaning the data safeguard unit) is t? ui oViaa for s 
a code agreement in the data exchange witrrtne code 
server module 32, that is to say to make available to the 
code unit 24 a clear and secret code which is safeguard- 
ed against any access and with which then the code unit 
can decode an item of sequence or gap information io 
transmitted by the copyright server module 34 and pre- 
pare it for use by the document construction module 26 
in the local computer: by means of that decoded item of 
sequence or gap information the data construction mod- 
ule 26 then accesses the data bank of the document '5 
store 1 8 and uses the item of information of the copyright 
server module, which is received over the network, in 
order to process the unordered or gappy data of the data 
store 18 to afford complete user data which are then 
made available to the user by way of the output unit 20. 20 
[0111] While the dialogue control module 28 controls 
co-operation in accordance with the protocol of the func- 
tional modules or correct execution of the method (to be 
described hereinafter), the clock 30 serves additionally 
to process possibly periodic user information - for ex- 25 
ample moving images - in a manner which is suitable 
for the user. 

[01 1 2] Finally, on the side of the host system, the bill- 
ing server module 36 is provided for correct identifica- 
tion of the local user, ascertaining the extent of use 30 
thereof at the documents published by way of the net- 
work, and finally generating appropriate billing data. 
[01 1 3] The document/update server 38 is finally pro- 
vided for the purposes of use in which not only sequence 
or gap information, concerning document data which 35 
are stored or present locally (document store 1 8) are 
used, but possibly additionally or instead thereof such 
data are supplied (published) by way of the network, for 
example in the respective most up-to-date form present 
at the operator host end. In addition, as will be set forth 40 
in detail in the following description of the method ac- 
cording to the invention, the module 38 serves for up- 
dating operating system components at the user end. 
[01 1 4] The procedure of the method according to the 
invention for protecting electronically published docu- <*s 
ments will now be described hereinafter with reference 
to the method flow charts in Figures 2 and 3 with refer- 
ence being directed to the embodiment described with 
reference to Figure 1 . 

[0115] In order cleariy to set forth the method and to so 
describe a possible form of local storage of the docu- 
ment data (in the data store 18), attention is additionally 
directed to the view in Figure 4 showing by way of ex- 
ample user data arranged in the storage sequence and 
the processed form thereof. As shown in Figure 4 (a), 55 
an item of electronic graphics is deposited for example 
in eight physically successive storage locations in the 
data store 1 8, wherein the sequence of the physical stor- 



age locations 1 to 8 with the information units arranged 
therein, as shown in Figure 4 (a), does not correspond 
to the usable (useful) sequence which is meaningful for 
a user - on the contrary there is lacking a sequential link 
between those nonlinearly stored data units in order to 
arrive at a meaningful comprehensible graphic data file 
a-b-c-d-e-f-g-h (Figure 4 (b)). However that sequence 
information which in the illustrated embodiment in Fig- 
ure 4 would correspond to the arrangement of the re- 
spective physical storage locations in the sequence 
3-2-8-1-5-4-7-6 is not contained in the document store 
18 but is transmitted from the host system externally 
over the network 10. 

[0116] At the beginning of the method according to the 
invention a network connection is made for the host sys- 
tem 12 by way of the network 10 to the local computer 
14; that network connection depends on the conditions 
and protocols which are necessary or typical for the net- 
work 10 used. 

[0117] There now follows in the flow chart of Figure 2 
the execution of an updating and test routine (indicated 
at A in Figure 2, illustrated in Figure 3), which will be 
further discussed in detail hereinafter. 
[0118] In step S10 the integrity of the local system is 
then tested - therefore a test is made by means of in- 
quiries and test procedures to ascertain whether misuse 
attempts have been made in the local computer system 
or precautions are involved in respect thereof - the local 
computer system is initialised for the subsequent code 
and data exchange with the host system and the nec- 
essary identification and billing data with the billing serv- 
er module 36 are transmitted. 

[0119] The subsequent code agreement in step S11 
then involves the transmission of a code from the (se- 
cure) code server module 32 of the host system 1 2 to 
the local computer; the code unit 24 stores that code in 
the code store 25. 

[0120] In step S12 the local computer then receives 
the encoded sequence signal, that is to say in the ex- 
ample shown in Figure 4 the numerical sequence 
3-2-8-1-5-4-7-6, in a form which is encoded by that in 
accordance with the code agreement (step S11). The 
code in the code store 25 then permits decoding of that 
sequence signal in step S13 by the code unit 24. 
[0121] There is therefore ready for the document 
structure or construction module 26 the (decoded) se- 
quence signal with which the module 26 can now access 
the document store 18 and process the data stored 
therein, in accordance with the received and decoded 
sequence, in readable and usable fashion (step S1 4) so 
that then in step S15 those processed useful data can 
be outputted by way of the display screen output unit 20 
and/or a printer unit 40. 

[0122] In step S16 the system then checks whether 
there is either a corresponding user input or inquiry for 
further documents to be processed, or whether, due to 
the nature of the electronically published document - for 
example a film - there is to be a continuous read-out of 
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data from the data store 1 8. The solid-line arrow 42 de- 
scribes the path of that feedback loop which goes back 
again to a location before the step S14 - document con- 
struction. 

[0123] Alternatively the method could also involve 
feedback connections to other earlier method stages: 
thus for example, in the manner shown by the arrow 44, 
the loop would be closed after step S16 to a location 
prior to the step S 1 2 so that in this case the local system 
would receive a new encoded sequence over the net- 
work, for further useful data which are to be locally proc- 
essed, and would decode it only prior to repeated exe- 
cution of the processing procedure and display in steps 
S 1 4 and S 1 5 (step S 1 3). As a further alternative the loop 
could even be closed at a location before the step S11 
(arrow 46); in that case a new code agreement would 
be made and then the subsequent loop would be exe- 
cuted again. 

[0124] It will be seen from the foregoing that the data 
security of the connecting data can be further enhanced 
in particular by loops with the arrows 44 and 46 respec- 
tively. 

[0125] Reference will now be made to the flow chart 
in Figure 3 to describe the upstream-disposed proce- 
dure as indicated by letter A in Figure 2, namely updat- 
ing, which is effected in accordance with a preferred de- 
velopment of the invention, of the operating program 
which is performed on the local computer for reception 
of the electronically published documents. 
[0126] That program is based on the consideration 
that operating software of that kind on the one hand can 
determine the performance of the described method 
and the co-operation of the described modules, but in 
addition it also has routines and inquiries which are suit- 
able for recognising and preventing unauthorised ac- 
cesses, attempts at manipulation and the like misuses 
on the local system. In the illustrated example the pro- 
gramming language Java is used to carry out the de- 
scribed method. The system also uses a security mod- 
ule which is integrated into Java in order to guarantee 
protection of the encoding procedures. It is also to be 
assumed that the local operating program environment 
on the local computer 14 is permanently modernised 
and updated, while techniques and procedures for de- 
tecting misuse are also being continuously further de- 
veloped so that it is not always the most up-to-date ver- 
sion that is to be found on the respective local computer 
14. 

[01 27] By means of the routine described in Figure 3, 
it is now possible not only to put the local operating sys- 
tem environment into the most recent state by way of 
the external host system 12, but it is also possible by 
way of that updating operation externally to check 
whether the local user is operating the local computer 
system 14 in the authorised and proper manner, that is 
to say whether the situation involves integrity. 
[0128] In step S20 the operating program - in the 
present embodiment running under Java - is started, 



whereupon then in step S21 the program makes the 
connection to the external host system 12. Step S22 
then involves inquiring whether - compared to corre- 
sponding identification data - the local system 14 has 
5 the most up-to-date version; if that is affirmed, the rou- 
tine reverts to the method as shown in Figure 2. If how- 
ever it is found in the inquiry of step S22 that the locally 
operated version is not in the newest state (no), the new- 
est version is sent in step S23 and started (S24) and the 
10 old version is terminated (S25). That now provides the 
prerequisite for the prescribed integrity to be checked in 
subsequent step S10 (Figure 2) by security routines. 
[01 29] In particular in that way, even when a success- 
ful attack on the content of a document is known, a re- 
's action can be immediately afforded by virtue of the fact 
that the Java operating program is correspondingly al- 
tered and thus similar repetition of that violation of pro- 
tection is impossible. 

[0130] Besides the above-described method steps it 

20 is necessary accurately to define and possibly limit the 
procedures to be applied by a user to the electronically 
published documents. For example output onto a printer 
40 would in fact permit copying and unauthorised dupli- 
cation of the document on paper, although admittedly 

25 with a loss of quality. In addition it would be necessary 
to ensure that (local) access to or storage of the output- 
ted data (step S15 or document structure/construction 
module 26) is not possible so that here too it is not pos- 
sible to re-use the data, that is to say misuse is excluded. 

30 [0131] In the manner described in accordance with 
the invention, by electronic publication, for example a 
(locally) stored document can be provided with an expiry 
date which is produced by configuration of the Java pro- 
gram and which is either predetermined as an absolute 

35 date (in the form of a defined moment in time), or it is 
possible to allow a right of use which is limited in terms 
of time (n hours); both options however require on-line 
access on the part of the user, in the manner according 
to the invention. 

40 [0132] In accordance with a development of this as- 
pect a document could require further updating proce- 
dures due to its expiry date. That development appears 
to be particularly suitable for reference books or manu- 
als, teaching organisations or the like. 

45 [0133] A further advantage of this invention could be 
seen in the ability to restrict and register the access of 
a certain person to confidential information. Therefore 
confidential and non-disclosed digital material could be 
controlled by a remote releasing server. 

50 [0134] An anonymised signal which is sent out from 
the (transmitted) document could indicate to the exter- 
nal host system how frequently the document is read or 
called up; in a corresponding manner it would be possi- 
ble to detect a period of time or other, on-line media- 

55 specific data, so that there is the possibility in a simple 
and usable manner of acquiring data for improving the 
on-line publication availability. In addition constructive 
market investigations or the like are also possible. 
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[0135] In quite specific terms the present method in- 
volves highly effective copying protection in relation to 
media stored on Compact Discs (CDs): copying of the 
CD serving as a local document store (reference numer- 
al 18 in Figure 1 and Figure 2 respectively) could not be 5 
prevented even if the data were stored on that CD in the 
manner shown in principle in Figure 4, provided with 
gaps, or put into a non-linear condition in some other 
manner; however the copying procedure would be 
meaningless for the unauthorised user. On the contrary, io 
with this aspect copying of the local data store would 
even have to be considered as desirable as that enlarg- 
es the potential circle of users and use is possible in any 
case only by host contact. 

[0136] In that respect the method according to the in- *s 
vention is not limited to separate transmission or addi- 
tion of a sequence of the (non-linear) document data as 
described in Figure 4; on the contrary, it is additionally 
or alternatively possible to store a document with data 
gaps in the local data store and then either to supply the 20 
associated gap data externally by way of the network or 
also to locally store same in orderthen externally to sup- 
ply only indexing or linking information relating to the 
link between the gap data and the (rest of the) docu- 
ment. Those gaps can be for example individual words 25 
of a text document. In addition certain data units can 
repeatedly occur in a usable sequence of said data 
units. Words or short phrases used more than once 
could be included in the text only once. The usage at 
the original position could be guaranteed by an opera- 30 
tional instruction that moves the phrase from its unique 
position in the prepared document to an intended dis- 
played position. 

[0137] In the practical performance of electronic pub- 
lication of written or typed documents, a viewer is nec- 35 
essary for representing the text, such a viewer having a 
limited and configurable functionality; for example the 
output unit must have a copying and printing option 
which can be activated or deactivated externally, that is 
to say by Java. That viewer should also prevent unau- *o 
thorised access to the generated text. While relevant 
text formats are ASCII, RTF, HTML, Postscript or PDF, 
in regard to practical performance the important consid- 
erations are functionality, universality and suitability in 
connection with current software packages. In this con- 
nection PDF or HTML respectively should be able to 
serve as a basis for the publication of documents in- 
volved in the publishing industry. 
[0138] A further aspect in regard to practical perform- 
ance is the erasure of all page references within the doc- so 
uments in order to prepare them for local secure data 
storage, in which case then those necessary links can 
be produced again (in controlled manner) for document 
usage by the items of sequence information, over the 
network. In the case of so-called hypertext media, a use 55 
according to the invention can already be involved by 
removal of the so-called "links", the speech-inherent 
connecting structures. 



[01 39] Digital Videos or films are produced in MPEG, 
MotionJPEG or AVI File format. Digital videos can be 
delivered in full-size and full motion video streams, un- 
compressed or by using compression and accepting a 
loss of quality, the data rate can be reduced. With spe- 
cial compression methods, constant or variable data 
transmission rate are achieved. In MPEG Format a vid- 
eo is separated into periodic individual high resolution 
pictures or frames, provided in an intraframe coding. An 
interframe coding by forward predicted frames or bi-di- 
rectional predicted frames is used to encode the differ- 
ences between frames. By changing the order of the de- 
livered intraframes or interframes the quality of the dig- 
ital video stream could be reduced. The reconstruction 
of a high quality image can be done by rearranging the 
correct sequence in the viewer with additional opera- 
tional instructions on an accompanying layer of the pro- 
tocol. 

[0140] Different methods of compression are applied 
to data with high redundancy. Compression can be dif- 
ferentiated into quality loss (lossyl and in no quality loss 
coding. Accordingly, in lossy coding irrelevancy is also 
eliminated. 

[01 41 ] In compression methods error correction or er- 
ror recovery methods or audiovisual synchronization or 
discrete Fourier or Cosine transformations are usually 
applied. Changes in the order or sequence at a certain 
position in a compressed data stream can be detected 
though not located by algorithms, and they have a large 
impact on the decoding process or on the usability of 
the decoding data. 

[0142] Database management systems handle fixed 
and variable data types differently. Depending on the 
handling of lists which contain the length of variable data 
records, the modification of structural elements would 
reduce the quality of a database and affect the perform- 
ance and reliability of the content. 
[0143] The electronic publication process described 
could also be generalized under the invention as fol- 
lows: 

[01 44] In order to make security measures independ- 
ent of the type of data transmission, the process is struc- 
tured or is operated asynchronously. Data of the so pre- 
pared electronic documents are sent to the customers 
in an open or public manner by e.g. CDs, broadcast or 
via Internet. The readability is arranged by a direct cus- 
tomer contact with a releasing server, through which the 
user payment is made. 

[01 45] After a payment or a releasing is completed the 
operational instruction has to be delivered in a secure 
manner to the program that reconstructs the original 
document from an external source. 
[0146] This transfer could be done by an online con- 
nection of the client to the server. On the Internet these 
connections are realized by one or several steps in be- 
tween. The message that has to be delivered to the cli- 
ent might be stored on several gateways or routers tem- 
porarily. 
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[01 47] A synchrony or an online contact between final 
user and server is not necessary as long as the transfer 
is realized in a manner that guarantees a secure transfer 
of the few data for reconstructing the usability. There- 
fore, these operational instructions could also be stored 5 
on a movable, secure but temporary electronic memory 
or an intermediate memory with an electronic unit that 
provides a secure data exchange only to the authorized 
user and destination. This hardware is state of the art 
and is realized in smart cards or in dongles. The ex- 10 
change procedures could also be realized by conven- 
tional, state of the art cryptological protocols. This smart 
card that might have to due to security reasons - con- 
tain some identification or authentification data, could 
be loaded with operational instructions and authorized '5 
for a definite purpose at some other distant or separated 
location, e.g. library or bookstore. 
[01 48] Another transfer of the operational instructions 
could be realized by a state of the art periodic or non- 
periodic broadcast of these individual instruction data. 20 
These data have to be identified only by an end user 
program that got a registered access right to the re- 
quested electronic document by the above releasing 
server. The method and software of how to extract data 
from this public broadcast data stream could be public 2s 
as well. The extraction algorithm only needs a secret 
session key or secret operational instructions to identify 
orto select only his requested instructional data. In order 
to be temporary off-line from a network in this manner, 
additional hardware has to listen for such broadcast 30 
messages. 

[0149] AM transfer or transmission methods need to 
have in common that they transfer or deliver data from 
an external source to the local source in a secure man- 
ner. All these transfer technologies have to provide in 35 
accordance with the operation of the invention as dis- 
closed in figure 2 and supporting disclosure either an 
online or at least one temporary online contact to a re- 
leasing server during a status that is usually offline. 
Therefore, even a smart card needs an online contact 40 
at least once in order to be prepared for offering the nec- 
essary data so that a final user is able to operate with 
the requested, usable electronic document. 
[0150] Network access is necessary for security and 
authentication reasons. If a smart card or a dongle is *s 
used to store operational instructions, access to these 
data must be provided by a separate access control pro- 
cedure only. This access control procedure can be cir- 
cumvented by sharing the smart card, if no additional 
online authentication is included. Because all informa- so 
tion about structural elements is stored on a releasing 
or copyright server, a network connection is ^tlwa y^ nec- 
essary in order to transfer the instructions for recon- 2 
structing the structural elements directly or via interme- 
diate, access-restricted, movable memory, as for exam- 55 
pie a smart card. 

[0151] A second connection is optional. It must be in- 
corporated into the communication process if the pub- 



lisher of a document wants to guarantee that use of the 
document will be obtained only under certain circum- 
stances, e.g., by users who have paid the royalties or 
on computers specially registered for this purpose. 

Claims 

1. Apparatus for protecting electronically published 
documents with a local computer system (14) which 
can be connected locally by way of a data transmis- 
sion network (10), to an external data source (12) 
and which is adapted to call up, execute, and/or out- 
put the electronically published documents, where- 
in the local computer system (14) comprises local 
data storage means (18) which is adapted for the 
storage of data of the electronically published doc- 
ument in a form which is not usable for a user 
wherein the local computer system (14) further 
comprises means (24) for receiving and processing 
additional protection data provided by the external 
data source (12) by way of the data transmission 
network (10), as well as a linking means (26) which 
is adapted to link a storage content of the local data 
storage means (18) with the additional protection 
data and to produce the electronically published 
document therefrom in a form usable, meaningful 
and/or suitable for sensory perception by the user, 
wherein the local computer system comprises out- 
put means (20) selected in accordance with the type 
of the document to be electronically published, 
adapted to call up, execute and/or output the doc- 
ument in the form usable, meaningful and/or suita- 
ble for sensory perception by the user, wherein the 
local data storage means (18) is adapted to store 
the electronically published document in a non-re- 
constructed, in particular a non-linear form, wherein 
the non-reconstructed document can be converted 
into a reconstructed linear document which is usa- 
ble by the user by the action of the linking means 
(26), utilising the additional protection data, char- 
acterised in that the local computer system (14) is 
designed to operate such that a local storage of the 
produced document in the form usable, meaningful, 
and/or suitable for sensory perception is not possi- 
ble, and a readability and usability of the produced 
document is dependent, in each session, on an on- 
line, or at least one temporary online, authenticated 
contact between the local computer system (14) 
and the external data source (12) via the data trans- 
mission network (10). 

Apparatus as set forth in claim 1 , characterized in 
that the linking means is adapted such that struc- 
tural elements of an electronically published docu- 
ment are modified by operational instructions de- 
rived from the additional protection data in order to 
effect the conversion to the reconstructed docu- 
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ment. 

3. Apparatus as set forth in claim 1 or 2 characterised 
in that the local data storage means is a magnetic 
and/or optical mass store (1 8) in which volume data 
of the electronically published document are stored 
in a plurality of storage locations which are not in- 
terrelated, and wherein the additional protection da- 
ta denote an interconnection and/or a sequence of 
the storage locations. 

4. Apparatus as set forth in claim 1 or 2 characterised 
in that the local data storage means is a magnetic 
and/or optical mass store (18), wherein volume data 
of the electronically published document which is 
stored therein have data gaps and the data gaps 
can be directly closed by the additional protection 
data, or wherein the additional protection data in- 
clude storage location identifications which refer to 
separate storage locations of the local data storage 
means (18), in which gap data are stored in a man- 
ner corresponding to the data gaps. 

5. Apparatus as set forth in one of claims 1 through 4 
characterised by an encoding means which is em- 
bodied by means of a first module (32) of the exter- 
nal data source and a second module (24) of the 
local computer system and which is adapted for the 
protected transmission of the additional protection 
data from the external data source (12) to the local 
computer system (14). 

6. Apparatus as set forth in one of claims i through 5 
characterised by an identification and/or billing 
module (36) which is adapted to identify a user of 
the local computer system and to acquire corre- 
sponding use and/or billing data. 

7. Apparatus as set forth in one of claims 1 through 6 
characterised by a control module (28) which is 
provided in the local computer system (14) and 
which is provided for dialogue and operational con- 
trol of the data exchange with the external data 
source (12) and/or an operating unit (22) which is 
provided to detect user commands and to influence 
operation of the local computer system as a reac- 
tion to the user commands. 



age means (18) which is part of the local com- 
puter system (14) and which stores the docu- 
ment data in a non-reconstructed, particularly 
a non-linear form, 

5 - receiving (S12) additional protection data from 

the external data source (12) connected to the 
local computer system (14) by way of the data 
transmission network (10), 
linking (S1 4) the additional protection data to a 

io content of the local data storage means (1 8) to 

produce document data in a form usable, 
meaningful and/or suitable for sensory percep- 
tion by the user, 

calling up, executing and/or outputting the doc- 
is ument data in said form, usable, meaningful 

and/or suitable for sensory perception by the 
user, by means of output means (20) selected 
in accordance with the type of the document to 
be published electronically, and 
20 - preventing a local storage of the produced doc- 
ument data. 

9. A method as set forth in claim 8 wherein the step of 
linking comprises the following steps: 

25 

deriving operational instructions from said ad- 
ditional protection data 

modifying structural elements of an electroni- 
cally published document with the operational 
30 instructions, thereby providing a reconstructed 

document in the form usable, meaningful and/ 
or suitable for sensory perception by the user 

1 0. A method as set forth in claim 8 or 9 characterised 
35 in that storage of local document data is effected 

in a sequence which, without linking to the addition- 
al protection data, does not permit representation 
of the document data in the form usable, meaningful 
and/or suitable for sensory perception. * 

40 

1 1 . A method as set forth in claims 8 or 9 characterised 
in that storage of the local document data with gaps 
occurs in such a way that the gaps are closed only 
by linking to the additional data. 

45 

12. A method as set forth in one of claims 8 through 1 1 
characterised by the following steps: 



8. A method of protected representation of electroni- 
cally published documents, comprising the follow- so 
ing steps: 

establishing, in each session, an online, or at 
least one temporary online, authenticated con- 
tact between a local computer system ( 1 4) and ss 
an external data source (12) via a data trans- 
mission network (10), 

calling up document data from a local data stor- 



identifying the user in the external data source 
(12), and 

exchanging user and/or billing data (S1 0) in re- 
spect of the user as a reaction to identification 
prior to reception of the additional protection 
data. 

1 3. A method as set forth in one of claims 8 through 1 2 
characterised 

in that the step of receiving the additional protected 
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data includes the following steps: 

encoding of the additional protection data by 
the data source (12), 

transmitting the encoded additional protection s 
data by way of the data transmission network 
(10), and 

decoding the encoded additional protection da- 
ta by the local computer system (14). 

w 

1 4. A method as set forth in claim 1 3 characterised by 
the following step: 

agreeing a code (S 1 1 ) between the external da- 
ta source (12) and the local computer system '5 
(14) prior to the encoding step. 

1 5. A method as set forth in one of claims 8 through 1 4 
characterised by successively calling up and rep- 
resenting a plurality of document units, wherein a 20 
set of the additional protection data is received for 
each of the document units. 

1 6. A method as set forth in one of claims 8 through 1 5 
characterised in that the reception of the addition- 25 
al protection data is dependent on a single and/or 
temporary access authorisation established by 
agreement between the local computer system (1 4) 
and the external data source (12). 

30 

1 7. A method as set forth in one of claims 8 through 1 6 
characterised in that the data which are usable by 
the user include a text, produced in a language, and 
having a plurality of words, the words are provided 

in an arrangement which forms a meaning for the 35 
user, and at least one of the words is arranged by 
the effect of the additional data at a position in the 
text which permits clear identification and associa- 
tion of the text with the user. 



Patentanspruche 



wie eine Verknupfungseinrichtung (26) aufweist, 
die zum Verknupfen eines Speicherinhalts der loka- 
len Datenspeichereinrichtung (18) mit den zusatz- 
lichen Schutzdaten und zum Erzeugen des elektro- 
nisch publizierten Dokuments in brauchbarer, sinn- 
voller und/oder zur sensorischen Erfassung fur ei- 
nen Benutzer geeigneten Form dazu eingerichtet 
ist, wobei das lokale Computersystem eine in Ab- 
hangigkeit von der Art des elektronisch publizierten 
Dokumentes gewahlte Ausgabeeinheit (20) auf- 
weist, die zum Abrufen, Ausfuhren und/oder Dar- 
stellen des Dokumentes in brauchbarer, sinnvoller 
und/oder zur sensorischen Erfassung geeigneten 
Form fur den Benutzer vorgesehen ist, wobei die 
lokale Datenspeichereinrichtung (18) zum Spei- 
chem eines elektronisch publizierten Dokuments in 
einer nichtrekonstruierten, insbesondere in einer 
nicht-linearen Weise ausgebildet ist, wobei das 
nicht-rekonstruierte Dokument in ein rekonstruier- 
tes lineares Dokument umsetzbar ist, das fur einen 
Benutzer, durch Wirkung der Verknupfungseinrich- 
tung (26) unter Benutzung der zusatzlichen Schutz- 
daten, nutzbar ist 

dadurch gekennzeichnet, dass das lokale Com- 
putersystem (14) so zum Betreiben ausgebildet ist, 
dass es zu einem lokalen Abspeichem des erzeug- 
ten Dokuments in brauchbarer, sinnvoller und/oder 
zur sensorischen Erfassung geeigneten Form nicht 
geeignet ist und die Lesbarkeit und Verwendbarkeit 
des erzeugten Dokuments fur jede Session abhan- 
gig von einem Online- Oder mindestens einem tem- 
poraren Online-authentisierenden Kontakt zwi- 
schen dem lokalen Computersystem (14) und der 
externen Datenquelle (14) mittels des Datenuber- 
tragungsnetzes (10) ist. 

2. Vorrichtung nach Anspruch 1, dadurch gekenn- 
zeichnet, dass die Verknupfungseinrichtung so 
eingerichtet ist, dass Strukturelemente des elektro- 
nisch publizierten Dokuments durch Arbeitsanwei- 
sungen, abgeleitet von den zusatzlichen Schutzda- 
ten, modifiziert werden, um die Umwandlung in das 
rekonstruierte Dokument zu erreichen. 



10 



25 



1 . Vorrichtung zum Schutzen elektronisch publizierter 

Dokumente mit einem lokal uber ein Datenubertra- 45 3. Vorrichtung nach Anspruch 1 Oder 2, dadurch ge- 

gungsnetz (10) mit einer externen Datenquelle (12) kennzeichnet, dass die lokale Datenspeicherein- 

verbindbaren, lokalen Computersystem (14), das richtung ein magnetischer uncVoder optischer Mas- 

zum Abrufen, Ausfuhren und/oder Darstellen elek- senspeicher (1 8) ist, in welchem Volumendaten des 

tronisch publizierter Dokumente eingerichtet ist, elektronisch publizierten Dokuments in einer Mehr- 

wobei das lokale Computersystem (14) eine lokale so zahl von nicht zusammenhangenden Speicherplat- 

Datenspeichereinrichtung (18) aufweist, die zum zen gespeichert sind, und die zusatzlichen Schutz- 

Speichern von Daten der elektronisch publizierten daten einen Zusammenhang und/oder eine Rei- 

Dokumente in einer fur einen Benutzer nicht henfolge der Speicherplatze bezeichnen. 
brauchbaren Form ausgebildet ist, wobei das lokale 

Computersystem (14) ferner Mittel (24) zum Emp- 55 4. Vorrichtung nach Anspruch 1 Oder 2, dadurch ge- 

fangen und Aufbereiten von durch die externe Da- kennzeichnet, dass die lokale Datenspeicherein- 

tenquelle (12) uber das Datenubertragungsnetz richtung ein magnetischer und/oder optischer Mas- 

(10) bereitgestellter, zusatzlicher Schutzdaten so- senspeicher (18) ist, Volumendaten des darin ge- 
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speicherten, elektronisch publizierten Dokuments 
Datenlucken aufweisen und die Datenlucken durch 
die zusatzlichen Schutzdaten unmittelbar ge- 
schlossen werden konnen, oder die zusatzlichen 
Schutzdaten Speicherplatzangaben enthalten, die s 
auf separate Speicherplatze der lokalen Datenspei- 
chereinrichtung(18) verweisen, inweichen Lucken- 
daten entsprechend den Datenlucken gespeichert 
sind. 

10 

5. Vorrichtung nach einem der Anspriiche 1 bis 4, ge- 
kennzeichnet durch mittels eines ersten Moduls 
(32) der externen Datenquelle sowie eines zweiten 
Moduls (24) des lokalen Computersystems reali- 
sierte Codiermittel, die zum geschiitzten Ubertra- '5 
gen der zusatzlichen Schutzdaten von der externen 
Datenquelle (12) zum lokalen Computersystem 
(14) eingerichtet sind. 

6. Vorrichtung nach einem der Anspriiche 1 bis 5, ge- 20 
kennzeichnet durch ein Identifikations- und/oder 
Abrechnungsmodul (36), das zum Identifizieren ei- 
nes Benutzers des lokalen Computersystems und 
zum Erfassen entsprechender Benutzungs- und/ 
oder Abrechnungsdaten eingerichtet ist. 25 

7. Vorrichtung nach einem der Anspriiche 1 bis 6, ge- 
kennzeichnet durch fein im lokalen Computersy- 
stem (14) vorgesehenes Steuermodul (28), wel- 
ches zur Dialog- und Ablaufsteuerung des Daten- 30 
austausches mit der externen Datenquelle (1 2) vor- 
gesehen ist, und/ oder eine Bedieneinheit (22), die 
zum Erfassen von Benutzerkommandos und zur 
Beeinflussung des Betriebs des lokalen Computer- 
systems als Reaktion auf die Benutzerkommandos 35 
vorgesehen ist. 

8. Verfahren zum geschiitzten Darstellen elektronisch 
publizierter Dokumente, 

gekennzeichnet durch die folgenden Schritte: *o 



ten mit einem Inhait der lokalen Datenspeicher- 
einrichtung (18) zum Erzeugen von fur den Be- 
nutzer brauchbaren, sinnvollen und zur visuel- 
len und/oder akustischen Erfassung geeigne- 
ten Dokumentdaten, 

Aufrufen, Ausfuhren und/oder Darstellen der 
Dokumentdaten in brauchbarer, sinnvoller und/ 
oder zur sensorischen Erfassung fureinen Be- 
nutzer geeigneten Form mittels einer in Abhan- 
gigkeit von der Art der elektronisch publizierten 
Dokumentdaten gewahlten Ausgabeeinheit 
(20) und 

Verhindern eines lokalen Abspeicherns der er- 
zeugten Dokumentdaten. 

9. Verfahren nach Anspruch 8, worm der Schritt des 
Verknupfens die folgenden Schritte aufweist: 

Ableiten von Arbeitsanweisungen aus den zu- 
satzlichen Schutzdaten 

Modifizierung von. Strukturelementen eines 
elektronisch publizierten Dokuments mit den 
Arbeitsanweisungen, wodurch ein rekonstru- 
iertes Dokument in einer brauchbaren, sinnvol- 
len und/oder zur sensorischen Erfassung in ei- 
ner fureinen Benutzer geeigneten Form bereit- 
gestellt wird. 

10. Verfahren nach Anspruch 8 oder 9, dadurch ge- 
kennzeichnet, dass ein Ablegen der lokalen Do- 
kumentdaten in einer Reihenfolge erfolgt, die ohne 
Verknupfung mit den zusatzlichen Schutzdaten kei- 
ne Darstellung der lokalen Dokumentdaten in der 
zur brauchbaren, sinnvollen und/oder zur sensori- 
schen Erfassung geeigneten Weise gestattet. 

11. Verfahren nach Anspruch 8 Oder 9, dadurch ge- 
kennzeichnet, dass ein luckenhaftes Ablegen der 
Benutzerdaten dergestalt erfolgt, dass nur durch 
Verknupfung mit den zusatzlichen Daten die Luk- 
ken geschlossen werden. 

12. Verfahren nach einem der Anspriiche 8 bis 11, ge- 
kennzeichnet durch die Schritte: 

Identifizieren des Benutzers in der externen 
Datenquelle (12) und 

Austauschen von Benutzer- und/oder Abrech- 
nungsdaten (S10) des Benutzers als Reaktion 
auf die Identifizierung vor dem Empfangen der 
zusatzlichen Schutzdaten. 

13. Verfahren nach einem der Anspriiche 8 bis 12, da- 
durch gekennzeichnet, dass der Schritt des Emp- 
fangens der zusatzlichen Daten die Schritte auf- 
weist: 

Verschlusseln der zusatzlichen Schutzdaten 



Einrichten in jeder Session eines Online- oder 
mindestens eines temporaren Online-authenti- 
sierenden Kontakts zwischen einem lokalen 
Computersystem (14) und einer externen Da- 4 $ 
tenquelle (12) iiber ein Dateniibertragungsnetz 
(10), 

Abrufen von Dokumentdaten aus einer mit ei- 
nem lokalen Computersystem (14) verbunde- 
nen, lokalen Datenspeichereinrichtung (18), so 
die die Dokumentdaten in einer nichtrekonstru- 
ierten, insbesondere nichtlinearen, Form spei- 
chert, 

Empfangen (S1 2) zusatzlicher Schutzdaten ei- 
ner mit dem lokalen Computersystem (14) iiber 55 
ein Dateniibertragungsnetz (10) verbundenen, 
externen Datenquelle, 

Verkniipfen (S14) der zusatzlichen Schutzda- 
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durch die Datenquelte (12), 
Obertragen der verschlusselten ; zusatzlichen 
Schutzdaten uber das Datenubertragungsnetz 
(10) und 

Entschlusseln der verschlusselten, zusatzli- 5 
chen Schutzdaten durch das tokale Computer- 
system (14). 

14. Verfahren nach Anspruch 13, gekennzeichnet 
durch den Schritt: io 
Vereinbaren eines Schlussels (S11) zwischen der 
externen Datenquelle (1 2)und dem lokalen Compu- 
tersystem (14) vor dem Schritt des Verschlusselns. 

15. Verfahren nach einem der Anspruche 8 bis 14, ge- *5 
kennzeichnet durch das aufeinanderfolgende Ab- 
rufen und Darstellen einer Mehrzahl von Doku- 
menteinheiten, wobei fur jede der Dokumenteinhei- 

ten ein Satz der zusatzlichen Schutzdaten empfan- 
gen wird. 20 

16. Verfahren nach einem der Anspruche 8 bis 15, da- 
durch gekennzeichnet, dass das Empfangen der 
zusatzlichen Schutzdaten abhangig ist von einer 
einmaligen und/oder temporaren, durch Vereinba- 25 
rung zwischen dem lokalen Computersystem (14) 
und der externen Datenquelle (12) festgelegten Zu- 
gangsberechtigung. 

17. Verfahren nach einem der Anspruche 8 bis 16, da- 30 
durch gekennzeichnet, dass die fur den Benutzer 
brauchbaren Daten einen in einer Sprache erstell- 

ten Text mit einer Mehrzahl von Worten umfassen, 
die Worte in einer fur den Benutzer einen Sinnge- 
halt bildenden Anordnung vorgesehen sind und 35 
mindestens eines der Worte durch Wirkung der zu- 
satzlichen Daten an einer Position im Text angeord- ' 2. 
net ist, die eine eindeutige Identifikation und Zuord- 
nung des Textes zum Benutzer ermoglicht. 

40 

Revendications 

1. Appareil pour proteger des documents publieselec- 

troniquement avec un systeme d'ordinateur local *s 3. 
(14) qui peut etre connects localement au moyen 
d'un reseau de transmission de donnees (10), a une 
source de donnees externe (12) et qui est adaptee 
pour appeler, executer et/ou fournir les documents 
publies Electroniquement, dans lequel le systeme 50 
d'ordinateur local (14) comprend des moyens de 
stockage de donnees locaux (18), qui sont adaptes 
pour le stockage de donnees du document publie 
electroniquement sous une forme qui n'est pas uti- 
lisabte par un utilisateur, dans lequel le systeme 55 
d'ordinateur local (14) comprend en outre des 4. 
moyens (24) pour recevoir et traiter des donnees 
de protection supplementaires foumies par la sour- 



ce de donnees externe (12) au moyen du reseau 
de transmission de donnees (10), ainsi que des 
moyens de liaison (26) qui sont adaptes pour retier 
un contenu de stockage des moyens de stockage 
' de donnees locaux (18) avec les donnees de pro- 
tection supplementaires et pour produire le docu- 
ment public electroniquement en provenance sous 
une forme utilisable, ayant un sens et/ou etant ade- 
quat pour une perception sensorielle par I'utilisa- 
teur, dans lequel le systeme d'ordinateur local com- 
prend des moyens de sortie (20) choisis en fonction 
du type de document a publier electroniquement, 
adaptes pour appeler, executer et/ou fournir le do- 
cument sous la forme utilisable, ayant un sens et/ 
ou adequat pour une perception sensorielle par I'uti- 
lisateur, dans lequel les moyens de stockage de 
donnees locaux (18) sont adaptes pour stocker le 
document publie electroniquement sous une forme 
non reconstruite, en particulier une forme non li- 
neaire, dans lequel le document non reconstruit 
peut etre converti en un document lineaire recons- 
truit qui est utilisable par I'utitisateur par Taction des 
moyens de liaison (26), en utilisant les donnees de 
protection supplementaires, et caracterisees en 
ce que le systeme d'ordinateur local (14) est congu 
pour fonctionner de sorte qu'un stockage local du 
document produit sous la forme utilisable, ayant un 
sens, et/ou adequat pour une perception sensoriel- 
le ne soit pas possible et une lisibilite et une utilisa- 
bilite du document produit depend, dans chaque 
session, d'un contact authentifie en ligne ou au 
moins temporairement en ligne entre le systeme 
d'ordinateur local (14) et la source de donnees ex- 
terne (12) par rintermediaire du reseau de transmis- 
sion de donnees (10). 

Appareil selon la revendication 1, caracterise en 
ce que les moyens de liaison sont adaptes de sorte 
que les elements structured d'un document publie 
electroniquement sont modifies paries instructions 
operationnelles derivant des donnees de protection 
supplementaires de fa^on a effectuer la conversion 
vers le document reconstruit. 

Appareil selon la revendication 1 ou 2, caracterise 
en ce que les moyens de stockage de donnees lo- 
caux sont constitues par une memoire de masse 
optique et/ou magnetique (18), dans lesquels les 
donnees de volume du document publie electroni- 
quement sont stockees dans une pluralite d'empla- 
cements de stockage qui n'ont pas de relation entre 
eux, et dans lequel les donnees de protection sup- 
plementaires indiquent une interconnection et/ou 
une sequence des emplacements de stockage. 

Appareil selon la revendication 1 ou 2, caracterise 
en ce que les moyens de stockage de donnees lo- 
cates sont constituds par une memoire de masse 
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optique et/ou magn£tique (18), clans lequel les don- 
nees de volume du document publie electrontque- 
ment qui sont stock£es k I'interieur presente des es- 
paces de donnees etces espaces de donnees peu- 
vent etre directement ferm6s par les donnees de 5 
protection supplementaires, ou dans lequel les don- 
nees de protection supplementaires incluent des 
identifications d'emplacement de stockage qui font 
reference a des emplacements de stockage sepa- 
res des moyens de stockage de donnees locales 10 
(18), des donnees correspondant aux espaces 
etant stockees d'une fagon correspondant aux es- 
paces de donnees. 

5. Appareil selon la revendication 1 a 4, caracterise is 
par des moyens d'encodage qui sont mis en oeuvre 

au moyen d'un premier module (32) de la source de 
donnees externe et d'un deuxieme module (24) du 
systeme d'ordinateur local et qui est adapte pour la 
transmission protegee des donnees de protection 20 
supplementaires en provenance de la source de 
donnees exteme (12) vers le systeme d'ordinateur 
local (14). 

6. Appareil selon Tune des revendications 1 & 5, ca- 25 
racterise par un module d'identification et/ou de 
facturation (36) qui est adapte pour identifier un uti- 
lisateur du systeme d'ordinateur local et pour ac- 
querir des donnees correspondant k Putilisation et/ 

ou a la facturation. 30 

7. Appareil selon Tune des revendications 1 & 6, ca- 
racterise par un module de contrdle (28) qui est 
dispose dans le systeme d'ordinateur local (14) et 

qui est prevu pour un controle de dialogue et ope- 35 
rationnel de I'echange de donnees avec la source 
de donnees exteme (12) et/ou une unite de traite- 
ment (22) qui est prevue pour detecter des com- 
mandes de I'utilisateur et pour influencer le fonc- 
tionnement du systeme d'ordinateur local en reac- <*o 
tion aux commandes d'utilisateur. 

8. Un procede de representation protegee de docu- 
ments publics electroniquement, comprenant les 
etapes suivantes : 45 

Petablissement dans chaque session, un con- 
tact authentifie en ligne, ou au moins temporai- 
rement en ligne, entre un systeme d'ordinateur 
local (14) et une source de donnees externe so 
(12) par rintermediaire d'un reseau de trans- 
mission de donnees (10). 

la demande de donnees de document en pro- 
venance d'un moyen de stockage de donnees ss 
locaux (18) faisant partie du systeme d'ordina- 
teur local (14) et qui stocke les donnees de do- 
cument sous forme non reconstruite, en parti- 
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culier non lineaire. 

la reception (s12) de donnees de protection 
supplementaires provenant de la source de 
donn6es externe (12) connectees au systeme 
d'ordinateur local (14) au moyen du reseau de 
transmission de donnees (10). 

la liaison (s1 4) des donnees de protection sup : 
plementaire k un contenu des moyens de stoc- 
kage de donnees locales (18) pour produire 
des donnees de document sous une forme uti- 
lisable, ayant un sens et/ou adequat pour une 
perception sensorielle par I'utilisateur. 

la demande, execution et/ou fourniture des 
donnees de document dans ladite forme utili- 
sable, ayant le sens et/ou adequate pour une 
perception sensorielle par I'utilisateur, au 
moyen de moyens de sortie (20) choisis en 
fonction du type de document devant etre pu- 
blie electroniquement, et 

I'evitement d'un stockage local des donnees de 
document produites. 

9. Un procede selon la revendication 8, dans lequel 
retape de liaison comprend les etapes suivantes : 

I'obtention des instructions fonctionnelles a 
partir desdites donnees de protection supple- 
mentaires. 

la modification les elements structurels d'un do- 
cument publie electroniquement avec. les ins- 
tructions fonctionnelles, pour ainsi fournir un 
document reconstruit sous la forme utilisable, 
ayant un sens et/ou adequat pour une percep- 
tion sensorielle par I'utilisateur. 

10. Un procede selon la revendication 8 ou 9 caracte- 
rise en ce que le stockage des donnees des docu- 
ments locales est effectuee dans une sequence qui, 
sans liaison de donnees de protection supplemen- 
taires ne permet pas la representation de donnees 
de documents sous une forme utilisable, ayant un 
sens et/ou adequate pour une perception sensoriel- 
le. 

1 1 . Un procede selon Tune des revendications 8 ou 9 
caracterise en ce que le stockage des donnees 
des documents locales avec des espaces est rea- 
list de telle f agon que ces espaces sont ferm£s seu- 
lement par liaison aux donnees supplementaires. 

12. Un proc6d6 selon I'une des revendications 8 k 11 
caracterise par les etapes suivantes : 
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Identification de Putilisateur dans la source de 
donn6es externe (12), et 

l'6change des donn6es d'utilisateur et/ou de 
facturation (s10) en fonction de I'utilisateur en s 
reaction a ('identification avant la reception des 
donn6es de protection supplementaires. 

13. Un proc6d6 selon I'une des revendications 8 a 12 
caracterise en ce que I'etape de reception de don- io 
nees de protection supplementaires inclut les eta- 
pes suivantes : 

Pencodage des donnees de protection supple- 
mentaires par la source de donnees (12) par la ^ 
transmission de 

la transmission des donnees de protection sup- 
plementaires encodees au moyen du reseau 
de transmission (10), et 20 

le ddcodage des donnees de protection supple- 
mentaires codees par le systeme d'ordinateur 
local (14). 

25 

14. Un proc6de selon la revendication 13 caracterise 
par i'etape suivante : 

('acceptation d'un code (s1 1 ) entre la source de 
donnees externe (12) et le systeme d'ordina- 30 
teur local (14) avant I'etape de codage. 

15. Un procede selon Tune des revendications 8 a 14 
caracterise par la demande et la representation 
successive d'une pluralite de documents, dans le- 35 
quel un jeu de donnees de protection supplemen- 
tal est recu pourchacune des unites de donnees. 

16. Un proced6 selon Tune quelconque des revendica- 
tions 8 a 1 5 caracterise par en ce que la reception <o 
des donnees de protection supplementaires de- 
pend de I'unique autorisation d'acces et/ou tempo- 
raire etabli par un accord entre le systdme d'ordina- 
teur local (14) et la source de donnees externe (12). 

45 

17. Un proc6de selon I'une quelconque des revendica- 
tions 8 a 1 6 caracterise en ce que les donnees qui 
sont utilisables par I'utilisateur comprennent un tex- 
te, foumi dans un langage presentant une plurality 

de mots, les mots etant disposes dans un agence- so 
ment qui forme une signification pour I'utilisateur, et 
au moins un des mots est agenc6 par I'effet des 
donn6es supplementaires en une position dans le 
texte qui permet une identification claire et une as- 
sociation du texte a I'utilisateur. ss 
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I. Basis of the report 

1 This report has been drawn on the basis of (substitute sheets which have been furnished to the receiving Office in 
response to an invitation under Article 14 are referred to in this report as "originally filed" and are not annexed to 
the report since they do not contain amendments.): 

Description, pages: 

1-8,11-18,20-33, as originally filed 
35 

9,9a, 10,19,34 as received on 12/08/1998 with letter of 11/08/1998 
filed with the demand 

as received on 12/08/1998 with letter of 11/08/1998 



Claims, No.: 

2-7,9-17 
1.8 



Drawings, sheets: 

1-3 as originally filed 

2. The amendments have resulted in the cancellation of: 

□ the description, pages: 

□ the claims, Nos.: 

□ the drawings, sheets: 

3. □ This report has been established as if (some of) the amendments had not been made, since they have been 

considered to go beyond the disclosure as fiied (Rule 70.2(c)): 

4. Additional observations, if necessary: 
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V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or Industrial 
applicability; citations and explanations supporting such statement 

1. Statement 



Novelty (N) 


Yes: 


Claims 


1-17 




No: 


Claims 




Inventive step (IS) 


Yes: 


Claims 


1-17 




No: 


Claims 




Industrial applicability (IA) 


Yes: 


Claims 


1-17 




No: 


Claims 





2. Citations and explanations 
see separate sheet 
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Re Item V 

Reasoned statement under Article 35(2) with regard to novelty, inventive step or 
industrial applicability; citations and explanations supporting such statement 

1. The present international application relates to an apparatus and method for 
protecting the representation of documents which may be published electronically 
with a local computer system that can be connected locally by way of a data 
transmission network to an external data source. In the local system, documents 
can be stored only in a form which is not meaningful or usable to a user; storage 
in useable form is explicitly not possible. Additional protected data is received over 
the network from the external data source and is linked with stored data 
representing a non-reconstructed, particularly a non-linear form of the document, 
to produce a reconstructed, linear document which is meaningful to a user. 

2. Such a technique is known from the prior art cited in the international search 
report, particularly D1 = US A 5 103 476. In Di, overlays which render ah 
unusable document usable are transmitted over a network to a user upon 
completion of a registration and licensing procedure, that is, they are transmitted 
once, at the start of the period of the contract of use. Similarly, D2 and D3 enable 
secured features upon completion of a licensing procedure. 

3. The present application is characterised by requiring, at each user session for 
retrieving, reconstructing and Using the document, that an online or at ieast a 
temporary online contact is made from the local system via the network to the 
external data source in order to render the document usable. The reconstructed 
document may then be Used but cannot be stored locally. None of the cited prior 
art documents disclosed or suggested this improvement. 
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question for the public release of (digital) video, audio and print 
media etc. in electronic form. 

EP 0 665 486 A2 discloses a method with which electronically 
published media, can be protected in order to achieve the aim outlined 
5 above . 

That method from the stare of the art involves a substantially 
cryptographic method in which an (electronic) document is transmitted 
by way of a network, which document is then to be decoded on the local 
computer. In that respect the local user decoding option is based on 
10 authentication, which occurs by way of the network, of the user and a 
corresponding individual coding, in addition the document is 

electronically so clearly identified that identification of an illegal 
copy can be traced back to the original User - therefore at least 
legal assertion of the claims involved, after illegal access or an 
15 unauthorised copy has occurred, is possible. 

However that method in accordance with the state of the art 
suffers from a number of disadvantages: thus the transmission and 
computing expenditure alone is already considerable for the reason 
that a specific version of the complete document must be transmitted 
20 by way of the network for each identified and authenticated user; 
therefore, besides the encoding expenditure for the entire document, 
the procedure involves transportation of a volume of data which is not 
inconsiderable, precisely in the case of multi-media documents. It is 
admittedly to be assumed that in future, by virtue of powerful 
computing installations, this method will also operate for a large 
number of (possibly simultaneously) accessing users, with an 
acceptable access time; however there is then still the problem that 
the network capacities are possibly not always sufficient for 
transmission of the amount of data involved in the complete document, 
30 precisely in terms of real-time operation. 

i Th e refore -- th e ob j ect — CrE — b hu pma u ilL lnverij^ian ~io — to pr ov ide ar/ 
apparatus and a method of the general kin^€t forth for the protected 
transmission and representation of^J^Tctronically published documents, 
which overcome those disadv^jHTages of the state of the art and in 
friar r i nil i tr — pe rmit — oac *ffr7 mo go — £ l e xiblo — and more — eetrtrre — clccfrconir*/ 

- 4<l - 
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(To -fce jrrrserted between pages 9 and 10 of the -description) 



US 5, 103,476 discloses an apparatus according to the preamble of 
claim l. This document also describee a method of distributing 
software in a secure manner by first distributing inactive or J1vk*J 
unusable portions of the programs and, additionally, transmit/eo- vJ 
called overlay files to be run together with the inactive software 
such that a final main program to be run on a local computer system 
can be achieved, the overlay may be communicated by means of a data 
transmission network upon completion of a registration and licensing 
procedure . 

EP Al 0 601 500 Al as well as W095/08231 additionally disclose 
apparatus for protecting electronically published documents 
disclosing several of the features of the preamble of claim 1. All 
of these documents include security systems or security mechanisms 
co control access to electronically published documents . clearly 
based oh completed billing or licensing transactions. 

However, neither of these documents known from the prior art permits 
further security or authentication during later sessions of 
retrieving and representing the respective electronically published 
document; once the initial licensing transaction has been completed. 
Therefore, particularly with regard to electronic documents that 
require tight access control, or that consist of specific document 
structures, such prior art technology appears deficient. 

Therefore, the object of the present invention is to provide in 
apparatus according- to the preamble of claim 1 that improves the 
control and flexibility of the document distribution process. 
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jpublic p*- 1 '"" 0<F fe4^e — duuumeu L j> , — * e ^e n — ovor^A^dgta — net w ork — j — e-t^ — <nog(> y 

generally, a data transmission m^HrCimT with a relatively slow 
transmission rate and/or a^trST^ti vely low transmission capacity/ 
| i . rirh^^t ^"^*nr> ^f^nhn/<r^.i ,i) i .^ J The invention further seeks to 
5 provide that the documents to be published in accordance with the 
invention aire potentially made available to an unlimited number of 
users (without respective individual complete encodings having to be 
effected for a respective user - which is expensive in terms of time 
and computing capacity - as in the above-mentioned state of the art) . 

10 That object is attained by the apparatus set forth in claim I and 

the method set forth in claim 

Advantageously in that respect the local storage of the 
electronically published document, although in a manner which is 
unusable for the user without the additional external data permits the 

15 non-encoded identical distribution of a theoretically unlimited number 
of identical documents without intervention in the rights of the- 
supplier or provider being possible by a copying action or the like. 
On the other hand, however, an interchange of the additional data 
takes place by way of the data transmission medium or the data 

20 network, with which data then the locally stored document data can be 
put into a usable and meaningful form for the user by the linking 
means . 

In this respect, in accordance with the invention, the expression 
„data transmission medium** means any electronic device for 

25 transmitting data, and "data transmission network" means any 
electronic network with which data can be exchanged or transmitted 
between computers, beyond the local area. Transfer media could be 
wired or non-wired phone lines, any cable capable for 'information 
transfer, any kind of broadcast like terrestrial or by satellite, or 

30 any kind of memory with input, output interfaces and which is able to 
perform data processing operation. 

As in particular it is also possible that transmission of the 
data for decoding the documents is effected by way of a terrestrial 
television transmitter or by way of satellite, in which case for 

35 example the inquiries also take place by way of a data line, the 



AMENDED SHEET 



^±n' drift r — , — liko the destination of o hyperlink or chc current/ 

r^.imK^r- p^t; ^ P ^ , \ ; > r 1 y ■■ i .i/ A clear text attack by use of the 

complete output and the access to the complete prepared electronic 
5 document does not necessarily offer all information of the original 
document. The jump addresses in hyperlinks and the corresponding 
destination addresses could be delivered by the external operational 
instructions as Well. Furthermore, fake reference or destination 
addresses could be included so that the completeness of an illegal 

10 reconstruction and its quality could never been proven by an attacker. 

The invention employs especially the linear structural elements 
between semant-ic entities or the de-addressing of frequently appearing 
names. These structural elements must not necessarily be contained in 
digitally coded information in the original data. If these structural 

15 elements are removed from an original, a so-prepared electronic 
document can be restored to the original state only with the aid of. 
externally introduced operating instructions. 

An electronic document can thereby be viewed as a passive or 
active program which runs only on a linking intermediate layer, thus 

20 on a linking unit Which cannot be circumvented and which it is not 
reasonable to circumvent. This linking unit transforms all the code 
instructions contained in this program into code instructions of the 
original document, so that only the thus-arising data leads as direct 

i 

electronic instructions or as instructions for the superordina ted , 
25 . higher or lower program interfaces to meaningful results. These 
instructions on the linking unit can be realized within the processor 
hardware with conventional electronic integrated circuit techniques. 

The linking unit brings volume data and data externally obtained 
e.g. from a network or from a locally protected data area, that is 
30 temporarily used but by network updated, together in order to achieve 
a restoration by using them as operating instructions and for the 
creation of the structural elements so that the original structure of 
the electronic document is restored or reconstructed and thus can be 
turned into a later output. 
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This transfer could be done by an online connection of the client 
co the server. On the Internet these connections are realized by one 
or several steps in between. The message that has to be delivered to 
the client might be stored on several gateways or roUterStemporarily . 
5 A synchrony or an online contact between final user and server is 

not necessary as long as the transfer i3 realized in a manner that 
guarantees a secure transfer of the few data for recons truct i^Tthe 
usability. Therefore, these operational instructions could also be 
stored on a movable, secure but temporary electronic memory or ar. 
10 intermediate memory with an electronic unit that provides a secure 
data exchange only to the authorized user and destination. This 
hardware is state of the art and is realized in smart cards or in 
dongles. The exchange procedures could also be realized by 
conventional, state of the art cryptological protocols. This smart 
15 card that might have to — due to security reasons.-- contain some 
identification or authentication data> could be loaded with- 
operational instructions and authorized for a definite purpose at some 
other distant or separated location, e.g. library or bookstore. 

Another transfer of the operational instructions could be 
20 realized by a state of the art periodic or non-periodic broadcast of 
these individual instruction data. These data have to be identified 
only by an end user program that got a registered access right to the 
requested electronic document by the above releasing server. The 
method and software of how to extract data from this public broadcast 
25 data scream could be public as well. The extraction algorithm only 
needs secret session key or secret operational instructions to 

identify or to select only his requested instructional data. In order 
to be temporary off-line from a network in this manner, -additional 
hardware has to listen for such broadcast messages . 
30 All transfer or transmission methods need to have in common that 

they transfer or deliver data from an external source to the local 
source in a secure manner. All these transfer technologies have to 
provide /either an online or at least one temporary online contact to a 
releasing server during a status that is usually offline. Therefore, 
35 even a smart card needs an online contact at least once in order to be 
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FURTHER A MKMDED CLAIMS: 

1. Apparatus for protecting electronically published documents with 
a local computer system (14) which can be connected locally by way of 
a data transmission network (10), to an external data source (i2) and 
which is adapted to call up, execute, and/or output the electronically 
published documents, wherein the local computer system (14) comprises 
local data storage means (13) which is adapted for the storage of data 
of the electronically published document in a form which is not usable 
for a user, wherein the local computer system (14) further comprises 
means (24) for receiving and processing additional protected data 
provided by the external data source Ct2) by way of the data 
transmission network (10) , as well as a linking means (26) which is 
adapted to link a storage content of the local data storage means (18) 
with the additional protected data and to produce the electronically 
published document therefrom in a form usable, meaningful and/or 
suitable for sensory perception by the user, wherein the local 
computer system comprises output means (20) selected in accordance 
winh the type of the document to be electronically published, adapted 
to call up, execute snd/or output the document in the form usable, 
meaningful and/or suitable for sensory perception by the user, wherein 
the local data Btorage means (18) is adapted to store the 
electronically published document in a non-reconstructed, in 
particular a non-linear form, .wherein the non-reconstructed document 
can be converted into a recons tructed linear document which is usable 
by the user by the action of the linking means (26) , utilising the 
additional protected data, and wherein the local computer system (14) 
is designed to operate such that a local storage of the produced 
document in the form usable, meaningful, and/or suitable for aensory 
perception is not possible, characterised in that a readability and 
usability of the produced document is dependent, in each session, on 
an online, or at least one temporary online, contact between the local 
computer system (14) and the external data source (12) via the data 
transmission network (10) . 
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8. A method of protected representation of electronically published 
documents, comprising the following steps: 

establishing, in each session, an online, or at least one 
temporary online, contact between a local computer syBtem (14) and an 
excerna l data source (12) via a data transmission network (10) , 

calling up document data from a local data storage means (18) 
which is part of the local computer system (14) and which stores the 
document data in a non-reconstructed, particularly a non- linear form, 

receiving (312) additional protected data from the external data 
source (12) connected to the local computer system (14) by way of the 
data transmission network (10) , 

linking (S14) the additional protected data to a content of the 
local data storage means (18) to produce document data in a form 
usable, meaningful and/or bu! table for sensory perception by the user, 

calling up, executing and/or outputting the document data in said 
form, usable, meaningful and/or suitable for sensory perception by the 
user, by means of output means (20) selected in accordance with the 
type of the document to be published electronically, and 

preventing a local storage of the produced document data. 
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2. Apparatus as set forth in claim 1, characterized in that the 
linking means is adapted such that structural elements of an 
electronically published document are modified by operational 
instructions derived from the additional protected data in order to 
effect the conversion to the reconstructed document. 

3. Apparatus as set forth in claim 1 or 2 characterised in that the 
local data storage means is a magnetic and/or optical mass store (18) 
in which volume data of the electronically published document are 
stored in a plurality of storage locations which are not interrelated, 
and wherein the additional protected data denote an interconnection 
and/or a sequence of the storage locations. 

4 . Apparatus as set forth in claim 1 or 2 characterised in that the 
local data storage means is a magnetic and/or optical mass store (18), ~ 
wherein volume data of the electronically published document which is 
stored therein have data gaps and the data gaps can be directly closed 
by the additional protected data, or wherein the additional protected 
data include storage location identifications which refer to separate 
storage locations of the local data storage means (18), in which gap 
data are stored in a manner corresponding to the data gaps. 

5. Apparatus as set forth in one of claims 1 through 4 characterised x 
by an encoding means which is embodied by means of a first module (32) 
of the external data source and a second module (24) of the local 
computer system and which is adapted for the protected transmission of 
the additional protected data from the external data source (12) to 
the local computer system (14) . 

6. Apparatus as set forth in one of claims 1 through 5 characterised 
by an identification and/or billing module (36) which is adapted to 
identify a user of the local computer system and to acquire 
corresponding use and/or billing data. 
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7. Apparatus as set forth in one of claims 1 through 6 characterised 
by a control module (28) which is provided in the local computer 
system (14) and which is provided for dialogue and operational control 
of the data exchange with the external data source (12) and/or an 
operating unit (22) which is provided to detect user commands and to 
influence operation of the local computer system as a reaction to the 
user commands. 

8 — A me t hod of protected representation - of electronically -published 
documents, characterised by the following steps: y 

calling up document data from a local da t,a^ storage means (18) 

s 

which is connected to a local computer system (14) and which stores 
the document data in a non- linear form, / 

receiving (S12) additional protected data of an external data 
source connected to the local computer system (14) by way of a data 
transmission network (10), 

linking (S14) the additional protected data to a content of the 
local data storage means t-18) to produce document data in a form 
usable, meaningful and/or/ suitable for sensory perception by the user, 
dependent on an online^contact between the local computer system and 
the external data SQurce, 

calling up, executing and/or outputting the document data in said 

form, usable, meaningful and/or suitable for sensory perception by the 

user, by means of output means selected in accordance with the type of 

the document to be published electronically, and 

/ 

=rr" preventing a storage"" o" f trhe" — produced Hbcument data. 

\/ 

9. A method as set forth in claim 8 wherein the step of linking 
comprises the following steps: 

deriving operational instructions from said additional protected 

data 

modifying structural elements of an electronically published 
document with the operational instructions, thereby providing a re- 
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constructed document in the form usable, meaningful and/or suitable 
for sensory perception by the user. 

10. A method as set forth in claim 8 or 9 characterised in that 
storage of local document data is effected in a sequence which, 
without linking to the additional protected data, does not permit 
representation of the document data in the form usable, meaningful 
and/or suitable for sensory perception. 

11. A method as set forth in claims 8 or 9 characterised in that 
storage of the local document data with gaps occurs in such a way that 
the gaps are closed only by linking to the additional data. 

12. A method as set forth in one of claims 8 through 11 characterised 
by the following steps: 

identifying the user in the external data source (12) , and 
exchanging user and/or billing data (S10) in respect of the user 

as a reaction to identification prior to reception of the additional 

protected data. 

13. A method as set forth in one of claims 8 through 12 characterised 
in that the step of receiving the additional protected data includes 
the following steps: 

encoding of the additional protected data by the data source 

(12) , 

transmitting the encoded additional protected data by way of the 
data transmission network (10), and 

decoding the encoded additional protected data by the local 
computer system (14). 

14. A method as set forth in claim 13 characterised by the following 
step : 

agreeing a code (Sll) between the external data source (12) and 
the local computer system (14) prior to the encoding step.* 
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15. A method as set forth in one of claims 8 through 14 characterised 
by successively "calling up and representing a plurality of document 
units, wherein a set of the additional protected data is received for 
each of the document units. 

16. A method as set forth in one of claims 8 through 15 characterised 
in that the reception of the additional protected data is dependent on 
a single and/or temporary access authorisation established by 
agreement between the local computer system (14) and the external data 
source ( 12 ) . 

17. A method as set forth in one of claims 8 through 16 characterised 
in that the data which are usable by the user include a text, produced 
in a language, and having a plurality of words, the words are provided 
in ah arrangement which forms a meaning for the user, and at least one 
of the words is arranged by the effect of the additional data at a 
position in the text which permits clear identification and 
association of the text with the user. 



